Privacy & safety

When language choices are available, choosing a language saves only en or es in the first-party nolo_locale cookie for one year. It remembers your display preference across pages and visits. It contains no identifier or search history and is not used for analytics. Clear site cookies to forget it.

You can use the public directory without an account. Here are the main limits to know before you search or share information:

• No One Left Outside LLC counts some page views and clicks in groups. Its own counters do not store your identity or a history of your visits.
• Cloudflare Web Analytics is a separate tool. It can receive page paths, including safety-related guide paths. Turning off No One Left Outside LLC’s measurement below does not turn off that script.
• Search words appear in the page address. Your browser history and hosting logs may contain them. Avoid names and private case details.
• If the disabled-by-default zero-result improvement counter is activated, a search with no matches may add a scrubbed phrase to a weekly Kentucky, Indiana, or both-states total. The details and opt-outs are below.
• Action-plan answers stay in your browser tab and are not sent to No One Left Outside LLC. A shared device, saved printout, or restored browser tab can still expose information.
• Correction reports store what you submit in a private review queue. Leave out client records, identity documents, and other sensitive information. An email for follow-up is optional.
• Quick Exit leaves the page; it does not erase browser history, downloads, saved files, or network records.

The sections below explain the details and your choices.

You do not need an account to browse, search, or report a correction. We do not build profiles of visitors and we do not use ad pixels.

No One Left Outside LLC uses a small first-party measurement system to count page views and a closed list of navigation actions. It immediately adds an allowed action to an aggregate counter. It does not create a row for a visit or build a history about one browser. No One Left Outside LLC also currently uses one third-party tool, Cloudflare Web Analytics, described below.

Searches use terms in the page URL. Those terms can appear in your browser history and in hosting-platform request logs available to authorized operators. Do not search a person’s name, address, or private crisis details.

On program pages and most guides without safety risks, feedback can record the program or guide ID, your Yes or No answer, and the time. After No, you can choose a reason from a short list. Search feedback records the answer, time, and chosen reason, but not your search. It does not ask for or store names, emails, typed comments, client details, search terms, or a visitor profile. We do not collect this feedback on safety guides or programs with a confidential location. Feedback can help us choose what to recheck. It cannot change a listing or create provider confirmation.

The allowed counters cover page views; searches classified into a broad need category and result-count band; zero-result searches; resource, organization, journey, and form views; form or packet open/print actions; phone, website, application, email, or directions clicks; and correction-form starts and accepted submissions. An outbound click is only an action on No One Left Outside LLC. It does not prove contact, referral, eligibility, enrollment, service delivery, or an outcome. Proposed new counters for listing-link clicks and coarse packet actions are not active until approved.

Search text is normally used only long enough to choose a broad category and word-count band. Result names, city, county, ZIP code, and other geography are not sent to or stored in the measurement system. Database errors are not counted as zero-result searches.

A separate, disabled-by-default zero-result improvement counter can keep an aggregate phrase only after the server confirms that the search returned no matches. It covers the Kentucky search, Indiana search, and the both-states search, and labels each total with its actual scope. Before storage, it lowercases and trims the phrase and drops terms that resemble a name, email address, phone number, street or post-office-box address, a four-or-more-digit number, or a safety-sensitive search. It stores no result list or visitor profile.

A phrase is available to reviewers only after at least five accepted searches in the same state scope and week. The scheduled maintenance job deletes aggregate rows after 90 days. A short-lived random page token is hashed, accepted once, and deleted after it expires; it does not contain the phrase or an address. Do Not Track, Global Privacy Control, and the measurement switch below prevent capture.

No One Left Outside LLC does not measure quick exit, confidential locations, domestic- violence or acute mental-health-crisis journeys, or resources in safety-sensitive categories. Unknown or unapproved pages fail closed and are not counted.

No One Left Outside LLC’s own measurement tables do not contain names, email addresses, phone numbers, street addresses, case details, diagnoses, benefit IDs, search text other than the scrubbed zero-result aggregate described above, full URLs, referrers, IP addresses, user-agent strings, cookies, session IDs, visitor IDs, rotating IDs, fingerprints, or precise location. No One Left Outside LLC does not use Google Analytics, Meta Pixel, session replay, ad identifiers, or marketing analytics.

The endpoint looks at the request origin and user-agent only in memory to reject cross-site requests and obvious automation. Those values are not copied into a counter or application log. Requests marked as verification, QA, or owner checks are rejected before No One Left Outside LLC increments its counters. If older counters are labeled as verification, they are excluded from owner-facing public-use totals. Bot and internal-traffic filtering is imperfect because No One Left Outside LLC deliberately does not assign a persistent identity to a browser.

Cloudflare Web Analytics also runs in your browser on most pages, including safety guides. The site blocks this script on action plans, their questions and print packets, signed-in case workspaces, and search pages with a query in the address. On other pages, it sends Cloudflare the page path, the site that linked you here, your country, and your device, browser, and operating system types. It also sends page-load timing. The page path can name a safety guide, such as the domestic violence guide.

According to Cloudflare’s documentation, this tool does not set cookies or use local storage, does not fingerprint your browser, does not track you across other sites, and does not record query strings such as search terms. No One Left Outside LLC uses it only to see overall traffic and does not use it to identify anyone.

The measurement setting below, Do Not Track, and Global Privacy Control turn off No One Left Outside LLC’s own counter only. They do not turn off the Cloudflare script; a browser content blocker usually does. No One Left Outside LLC plans to retire this script once its own counter is fully in place.

No One Left Outside LLC’s retention policy is 14 days for five-minute aggregate counters and 400 days for daily aggregate counters. Deletion depends on maintenance running; these periods are not a confirmed maximum retention time for the release covered by this notice. Scrubbed zero-result phrase aggregates have a separate 90-day deletion schedule and are never shown below the five-search threshold. There is no raw analytics-event table and no historical data was created for time before measurement began.

Cloudflare runs the website on Cloudflare Workers and stores cached pages in Cloudflare R2. Supabase hosts the PostgreSQL database that holds the counters. These services process connection details to run and protect the site. No One Left Outside LLC does not copy IP addresses into its analytics. Hosting and security logs are separate from our counters. They may keep IP addresses under each provider’s retention settings.

No One Left Outside LLC does not ask for case notes, diagnoses, Social Security numbers, benefits identifiers, financial data, identity documents, or client records. The correction form stores the text and references you choose to submit, so a warning cannot prevent sensitive information from being stored if you paste it there. Please do not send it.

A report may include the resource, the kind of concern, whether you are suggesting a fact or sharing an access experience, an optional role category, your explanation, and optional evidence references. You may also leave an email for follow-up about that report. We do not ask for your name, employer, client identity, or credentials.

Reports stay in a private review queue, and the submitted report, evidence reference, and optional email may be copied into a private reviewer notification. They do not change a public listing, become verification evidence, or affect search ranking automatically. No One Left Outside LLC does not accept document uploads through this form. Please do not paste private records or information about a specific client.

To limit abuse, the report form uses connection information to create a derived identifier, time window, and request count. That counter is separate from the public resource record. Leaving the email field blank means no contact email is attached to the report; it does not remove ordinary browser, network, or hosting logs.

This browser saves your display and color choices on this device. It also saves your choice if you turn No One Left Outside LLC’s aggregate measurement off. These settings do not identify you and are not sent as analytics fields. No One Left Outside LLC’s measurement does not use cookies. Browser Do Not Track and Global Privacy Control signals also turn it off, including the zero-result phrase counter. These choices do not turn off Cloudflare Web Analytics, described above.

“Did this work?” answers follow the same switch: when No One Left Outside LLC’s measurement is turned off on this device, or Do Not Track or Global Privacy Control is on, an answer is not saved. A saved answer holds only yes or no, an optional reason from a fixed list, the kind of page, the listing or guide it is about (if any), and the time. It holds no search words, name, contact, or device ID. As with change reports, a separate counter (a derived identifier, a time window, and a count) stops one connection from sending too many answers.

Action-plan questions and journey routing answers stay in this browser tab. They are not sent to No One Left Outside LLC or its measurement system. Use the action plan’s “Erase answers” control to remove its question answers. Closing a tab may not erase its data if your browser restores the session later.

If you save a plan on this device, it keeps your public guide choices and progress for seven days. No One Left Outside LLC checks the expiry when it loads the plan and tries to erase an expired copy. The saved plan excludes answers, typed notes, your county, and safety-sensitive guide choices. Printed and downloaded copies stay where you save them. Someone with access to this device may be able to read those copies.

The “Leave this site” button immediately takes you to a neutral website and removes this page from your tab’s back button.

Your internet activity can be monitored and can’t be completely erased. Quick Exit takes you to a neutral site immediately, but it does not clear your browser history, downloads, or anything visible to monitoring software. If browsing here isn’t safe, use a safer device.

No One Left Outside LLC does not currently request your device’s precise location. You can type a ZIP code, city, or county into search; like other search terms, that value appears in the page URL and may appear in request logs.

Email resources@nooneleftoutside.org.

If you find a possible security problem with No One Left Outside LLC, email dustin@nooneleftoutside.org with a description and the affected page. Do not include passwords, client records, or other private information. The machine-readable contact is in security.txt.