Privacy

Privacy notice

A movement asking for transparency owes you the same. This is a plain account of what this site collects, why, and how to make us delete it.

Last updated 21 September 2026.

Who is responsible for your details

OneTomorrow is not a company. It is a civic project run by one person, and that person is accountable for everything described on this page:

Colin Atwood
443 Western Ave #1176
South Portland, ME 04106
United States
[email protected]

Where this page says "we", it means him. No staff, contractors, or partner organisations see what you send.

What we collect

Only two things, and one of them never leaves your device.

What you send us through the join form
Your name, email address, the country, region, or community you name, and the description of what you want to help build. You type all of it deliberately; we ask for nothing else.
Your accessibility preferences
If you turn on larger text, high contrast, or less motion, or choose a language, that choice is stored in your own browser so the site remembers it. It is never transmitted to us and we cannot read it.

What we do not collect

Server records

The site is hosted on Cloudflare Pages. Like any web host, Cloudflare records requests, which includes your IP address, the time, the page requested, and your browser's user-agent string. These records exist to keep the site available and to stop abuse. We do not use them to build any picture of you, and we cannot connect them to a join request.

Who else handles your join request

Sending you an email reply means your message passes through four companies. Naming all of them is the point of a page like this:

The first three handle it only in transit. Google holds it at rest for as long as it stays in that inbox. Nobody else reads it.

Each of those companies keeps its own logs on its own schedule, which we do not control and cannot delete on your behalf.

Why we are allowed to hold it

Because you asked us to contact you. You gave it to us for a stated purpose, and we use it for that purpose and no other. If you are in a jurisdiction that frames this as consent and legitimate interest, that is the basis we rely on, and you can withdraw it at any time.

How long we keep it

No longer than one month. Join requests are deleted from the inbox within a month of arriving, whether or not the conversation went anywhere.

Ask us to delete yours sooner and we will, and confirm it. The one exception is the transit logs described above, which belong to the companies that carry the mail, not to us.

What you can ask for

Email [email protected] and ask us to show you what we hold, correct it, delete it, send you a copy, or stop using it. You do not need to give a reason and we will not ask for one. We answer within 30 days.

If you are in the UK, EU, or another territory with a data protection authority, you can complain to it. We would rather you told us first so we can fix it.

Where your details travel

Everything ends up in the United States, which is where this project and its inbox are based. If you are writing from outside the US, your details leave your own country to reach us. The companies above run global networks, so your message may pass through infrastructure in other countries on the way.

Children

This site is not aimed at children, and we do not knowingly collect details from anyone under 16. If a child has sent us something, tell us and we will remove it.

Changes

If this notice changes, the date at the top changes with it, and the edit is visible in the site's public commit history.

Contact

Write to [email protected]. The whole site is public at github.com/colinatwood/onetomorrow.today, so you can read exactly what the join form does before you use it.