Privacy Policy
Last updated Oct 5, 2026
This policy explains what Oathstar LLC, a Colorado limited liability company ("Oathstar", "we", "us"), collects about the people who use oathstar.com, what we do with it, and what we don't do. Our mailing address is 1500 N Grant St, Ste N, Denver, CO 80203. For anything here, write to privacy@oathstar.com.
The short version
- We collect only what we need to run accounts, billing, alerts and our conversations with you.
- We never sell or share personal data.
- We never see or store your card number. Stripe handles payments.
- You can delete your account yourself at any time from your Account page, or ask us at privacy@oathstar.com.
What we store
- Your account: your email address, and your password stored only as a scrambled hash, so we can't read it. If you tell us, also your name, your organization and the kind of organization you work for.
- What you follow: the people, bills and phrases you follow, and how often you want alert emails.
- Requests to us: what you type into the For teams form (name, work email, organization, kind of organization, role and message), and any email you send to us.
- Billing: your Stripe customer and subscription IDs, your plan, its status and your renewal date. Stripe collects and keeps your card details; we never receive them.
- Technical data: a cookie that keeps you logged in (up to 30 days) and a cookie that protects our forms. We don't use advertising or tracking cookies. Our hosting provider keeps ordinary server logs, such as IP addresses and the pages requested, for security and troubleshooting.
- Visit counts: to learn which pages help people, our own server adds up visits each day by kind of page (a member profile, a race page) and by where the visit came from (a search engine, an AI tool, social media, another site, or none). These are totals only: we don't store your IP address, set a cookie or use any third-party analytics for them. When you create an account, we note which sign-up button you used and the kind of page you were on.
How we use it
We use it to run your account (including emails that confirm your address, reset your password, and tell you when your email or password changes), take payment, send the alerts and weekly emails you ask for (you can turn them off on your Watchlist or Alerts page), answer your requests, follow up on your interest in the Team plan, keep the site secure and fix problems. Information from the For teams form and from sign-up is used only for Oathstar's own sales and support.
Who else handles your data
We use a few services to run Oathstar. They handle data on our behalf and not for their own purposes:
- Our hosting provider runs the site and its database.
- Stripe processes payments.
- Our email providers send the emails you ask for and run our own inbox.
Two things happen in your browser when you view a page: fonts load from Google Fonts, and member photos load from a public image archive. Both services can see your IP address when that happens.
What we don't sell
Oathstar does not sell, rent or share personal data about our users or about anyone else. In particular, we don't sell or give out:
- lists of our users or of people who contact us;
- contact directories of congressional staff, PAC staff or lobbyists;
- names, addresses or employers of individual campaign donors; or
- home addresses, personal phone numbers, birth dates or family details of officials or candidates.
Public officials and candidates
Our profiles cover members of Congress and candidates in their public roles, drawn from government records and public media. We don't publish private details about them. Campaign money on Oathstar is shown as totals and as gifts between committees, not as lists of individual donors. If you see something wrong on a profile, use the "Report a correction" link on the page.
How long we keep it
We keep your account information until you delete your account or ask us to delete it. Password-reset and confirmation links expire within a week (reset links within an hour), and records of failed log-ins are kept for 15 minutes to slow down password guessing. We keep messages from the For teams form for as long as they are useful for the conversation, and delete them when you ask. We keep billing records for as long as tax and accounting rules require, and Stripe keeps its own records under its own policy.
Your choices
- Delete your account. On your Account page, choose "Delete my account" and enter your password. We cancel any subscription first, so you won't be charged again, then delete your account straight away along with what you follow, your alert settings and your sign-ins, and email you a confirmation. Correction reports you sent stay on the record without your name, and messages you sent through the For teams form are kept unless you ask us to delete them too. Stripe keeps its own payment records, and we keep billing records only as long as the law requires. You can also email privacy@oathstar.com from the address on your account and we will do it for you, usually within 30 days.
- See or correct your data. Your email, password and the answers about you can be changed on your Account page. For anything else, email us and we will send you what we hold or fix it.
- Alert emails. You can turn them off on the alerts page.
- Where you live. Depending on where you live, the law may give you more rights. We handle requests the same way wherever you are.
Security
We use HTTPS, we store passwords only as salted hashes, and we keep card data off our servers entirely. No system is perfectly secure. If we learn of a breach that affects you, we will tell you as the law requires.
Children
Oathstar is for adults and students. It isn't directed at children under 13, and we don't knowingly collect their information.
Changes
If we change this policy, we will update the date at the top, and for material changes we will email account holders.
Contact
Oathstar LLC, 1500 N Grant St, Ste N, Denver, CO 80203
- Privacy requests: privacy@oathstar.com
- Support: support@oathstar.com
- Phone: (720) 526-2871