Privacy Policy
National Coalition on Accessible Voting (NCAV)
Administered by the National Disability Rights Network (NDRN)
Effective Date: March 17, 2026
The National Coalition on Accessible Voting (NCAV) is committed to protecting the privacy of everyone who visits our website at ncavote.org. This Privacy Policy explains what personal information we collect, how we use it, who we share it with, and what rights you have regarding your information. Please read this policy carefully. By using our website, you agree to the practices described below.
The NCAV is a coalition of more than twenty civil and disability rights organizations. Day-to-day administration of the NCAV, including this website, is managed by the National Disability Rights Network (NDRN). References to “we,” “us,” or “our” in this policy refer to the NCAV and NDRN in their joint capacity as operators of this site.
Contents
- Information We Collect
- How We Use Your Information
- Cookies & Tracking Technologies
- Third-Party Services
- How We Share Your Information
- Data Retention
- Security
- Your Rights & Choices
- Children’s Privacy (COPPA)
- External Links
- Changes to This Policy
- Contact Us
1. Information We Collect
We collect information in two ways: information you give us directly, and information collected automatically when you visit our site.
Information You Provide Directly
Contact form. When you submit a message through our Contact Us page, we collect the following information:
- First name
- Last name
- Email address
- Your message
This information is used solely to respond to your inquiry. We do not add contact form submitters to any mailing list without their explicit consent.
Information Collected Automatically
When you browse our website, technical and behavioral data is collected automatically through Cloudflare (our CDN and security provider) and Google Analytics. This may include your IP address, browser type and version, operating system, referring URLs, pages visited, time and date of your visit, time spent on pages, device type, and general geolocation. This data is used in aggregate form to understand how our site is used and to improve it. It is not used to identify you personally. See Section 3 for full details on the cookies used.
2. How We Use Your Information
We use the information we collect for the following purposes:
- Responding to inquiries. Information submitted through the contact form is used to respond to your questions or comments about the NCAV and our voting rights work.
- Site improvement. Analytics data helps us understand how visitors use our site, which content is most useful, and how to improve accessibility and navigation.
- Security and performance. Cloudflare cookies and related technologies protect our site from threats, manage traffic, and optimize performance.
- Legal compliance. We may process or retain information as necessary to comply with applicable law.
We do not use your personal information for automated decision-making or profiling. We do not sell your information to third parties.
3. Cookies & Tracking Technologies
Our website uses cookies — small text files placed on your device — and similar technologies. We use a cookie consent manager that allows you to accept, reject, or customize your preferences by category. The categories and specific cookies in use are described below.
Essential Cookies
These cookies are necessary for the website to function and cannot be switched off.
| Cookie Name | Description | Duration |
|---|---|---|
| Cookie Preferences | Stores the user’s cookie consent preferences as set via the cookie consent manager | 30 days |
Cloudflare Cookies (Performance & Security)
Our site uses Cloudflare for web performance, security, and CDN services. Cloudflare sets a number of cookies to perform these functions. All Cloudflare cookies listed below are session-based and expire when you close your browser, with the exception of cf_use_ob, which expires after approximately 30 seconds. For full details, see Cloudflare’s cookie documentation.
| Cookie Name | Description | Duration |
|---|---|---|
| cf_ob_info | Provides information on the HTTP status code returned by the origin server, the Ray ID of any failed request, and the data center serving traffic | Session |
| cf_clearance | Indicates whether a CAPTCHA or JavaScript challenge has been successfully completed | Session |
| __cfseq | Tracks the order and timing of requests to validate valid or invalid request sequences via Cloudflare Rules | Session |
| __cf_bm | Set by Cloudflare’s Bot Management and Bot Fight Mode to identify and mitigate automated traffic | Session |
| __cflb | Used by Cloudflare Load Balancer to route requests to the same origin server and manage failover | Session |
| _cfuvid | Set when Rate Limiting Rules are in use; helps the Cloudflare WAF distinguish individual users sharing the same IP address | Session |
| cf_chl_rc_ni, cf_chl_rc_m, cf_chl_rc_i | Internal Cloudflare cookies used to identify production issues on clients | Session |
| __cfruid | Used by Cloudflare’s content delivery network to identify trusted web traffic | Session |
| cf_use_ob | Informs Cloudflare to fetch resources from the Always Online cache; expires after approximately 30 seconds | Session (~30 seconds) |
| __cfwaitingroom | Used to track visitors accessing a host and path combination where a Cloudflare Waiting Room is active | Session |
Google Analytics Cookies (Statistics)
We use Google Analytics to collect anonymized statistics about how visitors use our site. These cookies are only set if you accept the Statistics category via our cookie consent manager. For more information, see Google’s Privacy Policy.
| Cookie Name | Description | Duration |
|---|---|---|
| _ga | Used to identify unique users across sessions | 2 years |
| _ga_ (GA4) | Used to identify users in Google Analytics 4 | 2 years |
| _gid | Used to identify users for 24 hours after last activity | 24 hours |
| _gat | Used to throttle the rate of requests to Google Analytics servers when using Google Tag Manager | 1 minute |
| _gali | Used by Google Analytics to identify which links on a page are being clicked | 30 seconds |
| _gac_ | Contains information related to marketing campaigns; shared with Google Ads when accounts are linked | 90 days |
| __utma | Used to identify users and sessions (legacy Universal Analytics) | 2 years after last activity |
| __utmb | Used to distinguish new sessions and visits (legacy Universal Analytics) | 30 minutes after last activity |
| __utmc | Used with legacy Urchin versions of Google Analytics to distinguish new sessions | End of browser session |
| __utmt | Used to throttle Google Analytics server request rates (legacy) | 10 minutes |
| __utmv | Stores custom data set via the _setCustomVar method (legacy) | 2 years after last activity |
| __utmx | Used to determine whether a user is included in an A/B or multivariate test | 18 months |
| __utmz | Contains information about the traffic source or campaign that directed the user to the site (legacy) | 6 months after last activity |
Managing Your Cookie Preferences
You can manage your cookie preferences at any time using the cookie consent manager on our website (accessible via the “Preferences” button in the cookie banner). You can also control or delete cookies through your browser settings. Most browsers allow you to refuse new cookies, delete existing ones, or receive a warning before cookies are stored. Please note that disabling certain cookies may affect site functionality. To opt out of Google Analytics tracking, you may use the Google Analytics Opt-Out Browser Add-on. For general information on managing cookies, visit allaboutcookies.org.
4. Third-Party Services
Our website relies on several third-party services, each with its own privacy policy. We encourage you to review these directly:
| Service | Purpose | Privacy Policy |
|---|---|---|
| Cloudflare | Website performance, security, DDoS protection, and CDN | cloudflare.com/privacypolicy |
| Google Analytics | Website usage statistics and visitor behavior analysis | policies.google.com/privacy |
| National Disability Rights Network (NDRN) | Coalition administration; contact inquiries are directed to NDRN | ndrn.org/privacy-policy |
Our site contains links to the websites of our member and partner organizations (listed on the About Us page). Those organizations maintain their own websites and privacy practices independently of the NCAV. Please review each organization’s privacy policy when visiting their sites.
5. How We Share Your Information
We do not sell, trade, or otherwise transfer your personally identifiable information to outside parties. We may share your information only in the following limited circumstances:
- Coalition administration. Contact form submissions are directed to NDRN staff, who administer the NCAV’s day-to-day operations and respond to inquiries on behalf of the coalition.
- Service providers. We share data with the third-party platforms listed in Section 4 solely to operate our website and deliver services, such as analyzing site usage and providing CDN and security infrastructure.
- Legal requirements. We may disclose your information if required to do so by law, court order, or governmental authority, or if we believe disclosure is necessary to enforce our policies or protect the rights or safety of any person.
- Organizational transfers. In the event of a significant organizational change affecting the NCAV or NDRN, user data may be transferred to a successor entity, provided it continues to be used consistently with this policy.
Non-personally identifiable visitor information (such as aggregate analytics data) may be shared with coalition members or other parties for reporting or research purposes.
6. Data Retention
We retain personal information for as long as necessary to fulfill the purposes described in this policy, or as required by applicable law.
- Contact form submissions are retained for as long as reasonably necessary to respond to your inquiry and maintain a record of communication, typically no longer than three years unless an ongoing relationship requires otherwise.
- Google Analytics data is retained in accordance with the retention settings in our Google Analytics account, typically up to 26 months, after which it is automatically deleted.
- Cloudflare data is retained in accordance with Cloudflare’s own data retention policies, which vary by cookie and data type. All Cloudflare cookies set on this site are session-based.
7. Security
We take reasonable technical and organizational measures to protect the personal information we hold against unauthorized access, disclosure, alteration, or destruction. Our website uses HTTPS encryption for all connections and is protected by Cloudflare’s security infrastructure, including bot management, DDoS protection, and a Web Application Firewall (WAF).
However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security. If you have reason to believe that your interaction with us is no longer secure, please contact us at the address in Section 12.
8. Your Rights & Choices
Depending on where you live, you may have certain rights regarding your personal information, including:
- Access. The right to request a copy of the personal information we hold about you.
- Correction. The right to request that we correct inaccurate or incomplete information.
- Deletion. The right to request that we erase personal information we hold about you. This does not include data we are required to retain for administrative, legal, or security purposes.
- Opt-out of information sharing. You may request that we not share your information beyond what is necessary to operate the website and respond to your inquiry.
- Cookie preferences. You may update your cookie choices at any time via the cookie consent manager on our site.
- Data portability. In some jurisdictions, you have the right to receive a copy of your data in a structured, machine-readable format.
- Withdrawal of consent. Where processing is based on consent, you have the right to withdraw consent at any time without affecting the lawfulness of prior processing.
Residents of California are afforded additional rights under the California Consumer Privacy Act (CCPA). Residents of the European Economic Area or the United Kingdom may have rights under the General Data Protection Regulation (GDPR) or UK GDPR, including the right to lodge a complaint with a supervisory authority.
To exercise any of these rights, please contact us using the information in Section 12. We will respond to your request within 30 days.
9. Children’s Privacy (COPPA)
We are in compliance with the Children’s Online Privacy Protection Act (COPPA). Our website, resources, and services are directed to people who are at least 13 years old. We do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13, we will delete that information promptly. To learn more about COPPA, visit the Federal Trade Commission.
10. External Links
Our website contains links to external websites, including federal legislation resources (congress.gov), the websites of our member and partner organizations, and third-party resources related to voting rights and disability rights. Links to other websites do not imply an endorsement of those sites or their content, nor does a link to our site imply that any linked organization endorses our content or policies.
Once you leave our site, this Privacy Policy no longer applies. We encourage you to review the privacy policies of any external site you visit. We are not responsible for the privacy practices or content of those sites.
11. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, coalition membership, or legal requirements. When we make material changes, we will update the effective date at the top of this page. We encourage you to review this page periodically. Your continued use of our website after any changes constitutes your acceptance of the revised policy.
12. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices — including requests to access, correct, or delete your personal information — please contact us:
National Coalition on Accessible Voting (NCAV)
c/o National Disability Rights Network (NDRN)
Email: info@ndrn.org
Website: ncavote.org/contact-us
We aim to respond to all privacy-related inquiries within five business days.
See also: Cookie Policy | Accessibility Statement