Privacy

What this site logs, in plain words.

I didn't have to write this page. Most campaign websites never say a word about what they log. I'm writing it because a candidate quietly keeping a six-month log of who reads his website is a bad story, and because straight answers are the whole point of this campaign. Here is exactly what rod4rsm.com records, what the Meta Pixel on it sends to Meta, why, how long it is kept, and who else can see it.

What is recorded: Yes, we record your IP address. It reaches us through a chain of forwarded-address headers, and any proxy, VPN, or network your connection passes through can add its own entry to that chain before it gets here. We use the entry added closest to us, straight from our hosting platform, because we cannot verify anything added earlier in the chain by someone else's network. Every request also carries a second, separate address. That one belongs to our hosting platform's own infrastructure, not to you, and we do not use it as your address.

Every visit writes one log line. It records: the kind of request and the page you asked for, including anything after the question mark (the query string); which of our hostnames you arrived on; where you came from, if you followed a link (the referrer); your IP address, as described above; what browser you are using; when it happened; whether the page loaded successfully; how many bytes we sent you; and how long we took to send them.
Why: To see which outreach, a flier, a social post, a search result, actually brings people to the site, and which pages they read once they are here.
How long: 180 days. After that, the log is deleted automatically.
Who else sees it: The site runs on Microsoft Azure, so Microsoft processes these logs as our hosting provider. A court order or other legal process could compel disclosure. Beyond that, nobody has a standing feed of this data.
Cookies and the Meta Pixel: Every page loads the Meta Pixel, a script from Meta, the company behind Facebook and Instagram. It sets a Meta cookie in your browser and tells Meta which page you opened, when, and your browser and IP address. If you are signed in to Facebook or Instagram in the same browser, Meta can connect the visit to your account. We use it to measure the campaign’s Facebook and Instagram ads and to show ads to people who have visited this site. Meta does not tell us who you are; we see totals. What Meta does with the data is governed by Meta’s privacy policy. You can limit it in your Facebook and Instagram ad settings, by blocking third-party cookies, or with a tracker-blocking browser extension. Our own server logs are never sold or traded to anyone. The donation form and the shop also reach outside this site, as described below.
The donation form: Donations are handled by Donorbox, which usesStripe to process the payment. Neither is part of this site, and neither loads anywhere except the donate page. Open that page and the form arrives from Donorbox, at which point they receive your IP address and whatever you type into it. The form also loads the payment and spam-protection services it relies on: Google Pay, Google’s gstatic, reCAPTCHA and hCaptcha, on that page only. Everywhere else on this site, none of them has been contacted on your behalf.
What the campaign sees, and what becomes public: We never see or store your card number — that stays with Stripe. We do receive your name, address, occupation and employer, because California requires a campaign to collect them. Contributions of $100 or more are itemized by name, address, occupation and employer on public filings with the City Clerk, which anyone can read. That is the law working as intended, and it is worth knowing before you give.
The shop, and the two questions before it: Buying campaign merchandise is a contribution under California law — the full purchase price, not the profit — so the same reporting rules apply as to any donation. Before the shop hands you to checkout, one page on this site asks your occupation and employer. Those two answers are recorded in our own server log, in a separate line from the ordinary visit log described above, and kept for the same 180 days before deletion. That line stores your two answers and a reference number for your cart. It does not store your IP address, your browser, or the page you came from.
Your cart stays in your own browser: While you shop, your cart is kept in your browser’s local storage on your own device. It holds only what you picked — item, colour, size and quantity — and it is never sent to us until you press the button at checkout. Nothing personal is ever stored there: your occupation and employer are typed at checkout and go straight out with the order, and are never saved in your browser. Clearing your browser data empties the cart.
Where the shop sends you: Payment, shipping and the merchandise itself are handled by Fourthwall, at shop.rod4rsm.com. It is a separate service and is not part of this site; nothing on rod4rsm.com contacts them until you choose to continue to checkout. Once you do, they receive your name, address and payment details. Your occupation and employer are also sent to them, attached to your order — California requires the campaign to obtain those from its payment provider, so they travel with the purchase rather than beside it. We never see your card number. As with donations, purchases totalling $100 or more are itemized by name, address, occupation and employer on public filings with the City Clerk.
Order notifications from the shop: When you complete a purchase, Fourthwall notifies this site so the campaign learns about it immediately rather than a day later — California requires contributions of $1,000 or more to be reported within 24 hours, and a delay is a missed deadline. That notification is written to the same server log for the same 180 days. It holds a copy of the order — your name, address, email and what you bought — and a signature that proves the message really came from Fourthwall. It contains no card details, and we treat it only as a prompt to check the official record.
Do Not Track: This site does not respond to a browser's Do Not Track signal. The Meta Pixel loads whether or not it is set; the ad settings and browser tools described above are the way to limit it.
Effective date and changes: Effective September 26, 2026, replacing the version of August 15, 2026. The change: every page now loads the Meta Pixel, described above, to measure the campaign’s Facebook and Instagram ads. This page was rewritten in the same release rather than after it, because a privacy page that overstates its own restraint is worse than one that never made the claim. If what we log, or why, ever changes again, this page changes with it first.