Your Account — What We Store and Why

Three things, in plain terms. Your email and (optional) display name — needed to sign you in and address you. Your date of birth — used only to confirm you meet the 16+ age threshold the Citizen Participation Plan sets for participation; never displayed publicly. Your address claim and which NA it matched to — needed so the platform knows where you live and whose elections you can vote in.

Everything else the platform records is a side effect of what you do: sign-ins, role changes, residency-claim submissions, password updates. Those go into an append-only audit log so nothing about your account can be silently rewritten.

No phone number unless you choose to add one to a future profile field that hasn’t shipped yet. No photo. No social-media handles. No demographic data beyond what you optionally provide. No tracking pixels, no third-party analytics that follow you around the web.

The platform does not share your data with anyone outside the platform. There is no marketing partner, no data broker, no city department other than CRS in their official auditor capacity.

Visit Settings → Export my data. You can download every category — your user record, your audit history, your residency record(s) — as CSV or JSON. The download is yours; the platform never gates your data behind staying.

This isn’t a courtesy. It’s a federal CDBG requirement (24 CFR 91.105) and a PRD non-negotiable for the project: if a tenant ever leaves the platform, they leave with all their data, in a format usable on Day 1 in any other system.