This is the privacy policy for California Tomorrow. It describes what data is collected through this site and how it is used. It is not legal advice. Reading this site does not create an attorney-client relationship between you and California Tomorrow, its operator, or the AI systems that draft its content.
The Short Version
California Tomorrow is a personal civic-info project. We use Google Analytics, loaded through Google Tag Manager, to see how the site is used. We do not sell your personal information. The only place readers send us data on purpose is the feedback and corrections form on the contact page. Everything else on this page describes the smaller amount of data that any website operator necessarily handles when a browser connects to a server.
Who Runs This Site
California Tomorrow is run by Mike Zeballos, a California-based full-stack web developer. Hosting and infrastructure are provided by LOGON, Inc., his web development company. Background, scope, and editorial model are described on our About page and editorial policy.
This privacy policy applies to the California Tomorrow website. It does not apply to other sites that California Tomorrow links to, including official government sites, legal aid organizations, or any other third party.
What We Collect
From the contact form
Our contact page hosts a single form for feedback and corrections. The form collects the following fields when you submit it:
- The page you are writing about. This field is filled in automatically based on the page you were on when you opened the form. It can be edited or cleared before you submit.
- The kind of feedback. A required dropdown choice (error, outdated information, suggestion, additional information, or other).
- Details. A required free-text field where you describe the feedback. Whatever you type into this field is what we receive.
- Your name. Optional. We do not need it to act on feedback.
- Your email. Optional. Provide it only if you want a reply.
The form does not collect immigration case details, government identification numbers, dates of birth, or anything else of that kind, and we ask that you do not include sensitive information in the details field. Messages submitted through this form are not confidential and are not protected by attorney-client privilege.
If you do include sensitive information in a submission, that information is held under the same retention and access rules as other contact-form data described below, and you can request its deletion at any time.
From your browser, automatically
When any browser visits a webpage on this site, the hosting server records standard web-server log entries. These typically include:
- The IP address the request came from.
- The date and time of the request.
- The URL requested.
- The browser and operating-system identifier (the “user-agent” string).
- The referring page, when the browser sends one.
This is how every standard web server logs traffic. We use these logs to debug problems, identify abusive traffic, and meet our hosting provider’s normal operational requirements.
From the security plugin
The site uses a security plugin to block brute-force login attempts, malicious scans, and known-bad traffic. It records security-relevant events, including IP addresses associated with blocked or suspicious requests, and may share some of that information with the plugin provider’s threat-intelligence service, under that provider’s own privacy policy.
From Google Analytics
This site uses Google Analytics, loaded through Google Tag Manager, to understand how visitors find and use the site. Google Analytics sets cookies and collects usage data: the pages you view, how long you stay, your approximate location (from a shortened form of your IP address), your device and browser, and the site that referred you. Google processes this information under Google’s privacy policy. You can opt out across all sites with Google’s Analytics Opt-out Browser Add-on.
What we do not collect
- No Facebook Pixel, Twitter pixel, or other social-network tracking pixels.
- No marketing or email-list integrations.
- No fingerprinting tools.
- No data brokers.
How We Use the Data
We use the data described above for the limited purposes it was collected for:
- Contact-form submissions are read by Mike, used to act on the feedback (correcting a page, considering a suggestion, adding a source), and to reply if you provided an email and a reply is appropriate.
- Server logs are used to debug site issues, identify abusive traffic, and meet normal hosting operational needs.
- Security-plugin data is used to keep the site online and protected from attacks.
Google Analytics data is used only to understand how the site is found and used. We do not sell your data.
Cookies
This site uses functional cookies plus Google Analytics cookies, loaded through Google Tag Manager, that measure how the site is used.
- WordPress session cookies are set only for logged-in users. The only logged-in user on this site is the operator. Anonymous visitors do not receive WordPress session cookies under normal browsing.
- Form session cookies may be set briefly by the contact form to support submission and spam protection.
- Security cookies may be set by the security plugin in response to specific security events.
- Analytics cookies (such as _ga and _gid) are set by Google Analytics to measure usage.
Who Has Access
The data collected by this site is accessible to:
- Mike Zeballos, the operator, who reads contact-form submissions and has administrative access to the hosting environment.
- LOGON, Inc., as the hosting provider, has the technical access any hosting provider has to the server where the site runs. LOGON has no editorial influence on the site and no business interests in immigration law or services.
- The security provider, for the security data described above, under its own privacy policy.
- Google, which processes the Google Analytics data described above under its own privacy policy.
Aside from Google, which receives the analytics data described above, we do not share data with anyone else, including law enforcement, except where required by valid legal process.
About AI and your data
Site content is drafted by AI, currently Anthropic’s Claude Opus 4.7 model. The AI processes the editorial framework files Mike maintains. It does not process contact-form submissions, server logs, security data, or any other reader data. The content-generation pipeline and the reader-data systems are separate.
How Long We Keep It
- Contact-form submissions are retained until they have been acted on, and after that they may remain in the form’s database without a fixed automatic deletion schedule. If you want a submission you sent us deleted, ask, and we will delete it.
- Server logs are retained per the hosting provider’s default rotation, typically a small number of weeks.
- Security-plugin data is retained per the plugin’s defaults and its own retention rules.
Your Rights
California Tomorrow is a small, non-commercial personal project and does not meet the size and revenue thresholds the California Consumer Privacy Act (CCPA) uses to define a covered “business.” Even so, we offer the following as a matter of policy to anyone who has interacted with the site:
- The right to know what data we have about you. If you submitted the contact form, we have what you sent us. If you visited the site, the server has standard log entries with your IP for the retention window described above.
- The right to delete any contact-form submission you sent us.
- The right to correct anything in a submission you sent.
- The right not to be sold or “shared” for cross-context behavioral advertising. We do not sell or share data, period. There is no opt-out to set because there is no sharing or sale to opt out of.
To exercise any of these rights, contact us through the contact form and tell us what you would like done. There is no fee. We do not require a government ID to act on a request from someone whose only data on the site is a form submission they themselves sent us.
Children
This site is informational and is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has submitted information through the contact form, contact us and we will delete it.
Security
The site runs over HTTPS, so the connection between your browser and our server is encrypted. We use a security plugin to block obvious attacks and we keep the WordPress installation, theme, and plugins updated. No website is perfectly secure, and we do not promise that the site cannot be breached. If a breach affects reader data, we will post a notice and notify affected readers where we have an email address for them.
Changes to This Policy
If this policy changes, the updated version will be posted here and the “last updated” date will change. For changes that meaningfully affect what we collect, how we use it, or who has access, we will note the change at the top of this page for a reasonable period.
Contact for Privacy Questions
For privacy questions or to exercise any of the rights described above, use the contact form. Choose the “Other” feedback type and mention privacy in the details field so we route it correctly.
Last updated: April 30, 2026.
