# Privacy: Before You Sign

Status: filled for concept prototype (VOTP-2026-005). Interview build only.

## Data inventory

| Data item | Why it's needed | Where it's stored | Who can see it | How long it's kept | How the user deletes it |
|---|---|---|---|---|---|
| Receipt notes (who / when / what) | User’s private memory aid | Browser localStorage on device | User only | Until user deletes | “Delete this note” or “Delete all receipts” |
| Red-flag checklist ticks | User’s private checklist | Browser localStorage on device | User only | Until cleared | “Clear checks” |
| Help-type choice (VA vs tax) | Remembers last path | Browser localStorage on device | User only | Until cleared / changed | Change choice or clear site data |

## Consent

- Opening the app shows a concept / not-affiliated banner before any tool.
- Receipts are optional. Saving is an explicit tap. No account.
- Clearing receipts or checks is one tap; clearing browser site data also removes them.

## Sharing

- Default: nothing leaves the device.
- User-initiated only: opening outside links (VA, IRS, SSA, VSAFE, America.gov, Form 14157 PDF). Those sites apply their own policies.

## Never collected

SSNs, account numbers, passwords, message or screen content, call/SMS access, covert location, analytics beacons from this prototype.

## Backend

None. Static Cloudflare Pages hosting only. Bundled mock lists and a sample of public .gov domains ship with the files.

## Children

No. Not directed at anyone under 13.

## Plain-language privacy policy

See the in-app Privacy screen (`#privacy`) and the home-page disclaimer.