Privacy & safety

You do not need an account to browse, search, or report a correction. We do not build profiles of visitors and we do not use ad pixels or cross-site tracking.

In Public Beta, NOLO uses a small first-party measurement system to count page views and a closed list of navigation actions. It immediately adds an allowed action to an aggregate counter. It does not create a row for a visit or build a history about one browser.

Searches use terms in the page URL. Those terms can appear in your browser history and in hosting-platform request logs available to authorized operators. Do not search a person’s name, address, or private crisis details.

On program pages and most non-sensitive guides, a Yes or No answer can record the page’s program or guide identifier, the answer, the time, and—only after No—an optional reason chosen from a short list. It does not ask for or store a name, email, free text, client information, search terms, or a visitor profile. Feedback is not collected on safety-sensitive guides or programs with a confidential location, and it can only prioritize a recheck; it cannot change a listing or create provider confirmation.

The allowed counters cover page views; searches classified into a broad need category and result-count band; zero-result searches; resource, organization, journey, and form views; form or packet open/print actions; phone, website, application, email, or directions clicks; and correction-form starts and accepted submissions. An outbound click is only an action on NOLO. It does not prove contact, referral, eligibility, enrollment, service delivery, or an outcome.

Search text is used only long enough to choose a broad category and word-count band. The search text itself, a hash of it, result names, city, county, ZIP code, and other geography are not sent to or stored in the measurement system. Database errors are not counted as zero-result searches.

NOLO does not measure quick exit, confidential locations, domestic- violence or acute mental-health-crisis journeys, or resources in safety-sensitive categories. Unknown or unapproved pages fail closed and are not counted.

The measurement tables do not contain names, email addresses, phone numbers, street addresses, case details, diagnoses, benefit IDs, search text, full URLs, referrers, IP addresses, user-agent strings, cookies, session IDs, visitor IDs, rotating IDs, fingerprints, or precise location. NOLO does not use Google Analytics, Meta Pixel, session replay, ad identifiers, or marketing analytics.

The endpoint looks at the request origin and user-agent only in memory to reject cross-site requests and obvious automation. Those values are not copied into a counter or application log. Production and verification traffic are labeled separately, and verification counters are excluded from owner-facing public-use totals. Bot and internal-traffic filtering is imperfect because NOLO deliberately does not assign a persistent identity to a browser.

Allowed actions are stored as five-minute aggregate counters for up to 14 days. Daily aggregate counters are kept for up to 400 days. There is no raw analytics-event table and no historical data was created for time before measurement began.

Vercel hosts the public website and Neon hosts the PostgreSQL database that contains the counters. Like any hosting and network providers, they process connection information needed to deliver and protect the service. NOLO does not copy IP addresses into analytics and does not claim that ordinary hosting or security logs truncate IP addresses. Those platform logs are separate from NOLO’s aggregate counters and may exist under the providers’ operational retention settings.

NOLO does not ask for case notes, diagnoses, Social Security numbers, benefits identifiers, financial data, identity documents, or client records. The correction form stores the text and references you choose to submit, so a warning cannot prevent sensitive information from being stored if you paste it there. Please do not send it.

A report may include the resource, the kind of concern, whether you are suggesting a fact or sharing an access experience, an optional role category, your explanation, and optional evidence references. You may also leave an email for follow-up about that report. We do not ask for your name, employer, client identity, or credentials.

Reports stay in a private review queue, and the submitted report, evidence reference, and optional email may be copied into a private reviewer notification. They do not change a public listing, become verification evidence, or affect search ranking automatically. NOLO does not accept document uploads through this form. Please do not paste private records or information about a specific client.

To limit abuse, the report form uses connection information to create a derived identifier, time window, and request count. That counter is separate from the public resource record. Leaving the email field blank means no contact email is attached to the report; it does not remove ordinary browser, network, or hosting logs.

If you change NOLO’s visual experience setting, the browser stores that non-identifying display preference on this device. NOLO also stores a simple true/false preference here if you turn aggregate measurement off. Neither value identifies you, and neither is sent as an analytics field. Measurement does not set cookies. A browser Do Not Track or Global Privacy Control signal also turns measurement off.

The “Leave this site” button immediately takes you to a neutral website and removes this page from your tab’s back button.

Your internet activity can be monitored and can’t be completely erased. Quick Exit takes you to a neutral site immediately, but it does not clear your browser history, downloads, or anything visible to monitoring software. If browsing here isn’t safe, use a safer device.

NOLO does not currently request your device’s precise location. You can type a ZIP code, city, or county into search; like other search terms, that value appears in the page URL and may appear in request logs.

Email resources@nooneleftoutside.org.