Privacy
Last checked October 28, 2026
What we store
- Your report: what you enter (agency details including the chief administrator’s name if you type it, the counts, complaint outcomes and resolutions, notes and findings, and your choice of population area). Reports must not contain identifying information about officers or people stopped (art. 2B.0055(d)); the form reminds you.
- A coded visitor ID: to limit how many reports one visitor can start in a day, we keep a keyed hash of your IP address. The key is random and replaced every day, so the hash can’t be turned back into an address afterwards. We don’t store IP addresses.
- Payment: Stripe and Link (Stripe’s checkout service) handle payment, receipts and invoices. We never see your card number, and we don’t keep the buyer’s email address; Stripe does, under its own privacy policy.
How long
- Paid reports: deleted automatically two years after payment.
- Unpaid drafts: deleted automatically 90 days after their last change.
- Visitor IDs for limits: kept for a week.
Who can see it
Anyone who has your report’s private link can open and edit it, so share it only with people who should. We don’t publish, sell or share your report. We look at a report only if you write to us about it. Free drafts use TCOLE’s public statewide file, not anything you enter.
Once your agency submits its report to TCOLE and its governing body, that copy may be a public record. Our copy isn’t published.
Service providers
- Cloudflare: hosting and storage (United States).
- Stripe and Link: payments.
Cookies and analytics
We don’t set cookies. We use Cloudflare’s cookie-free Web Analytics to count page visits; it doesn’t record the private part of report links.