Last updated: October 10, 2026 (Tech Forum added)
This notice explains what WhiteFeathers.org collects, why, and the choices you have, including your rights as a California resident under the California Consumer Privacy Act (CCPA), as amended by the CPRA.
What we collect
- Sign in with Google. Signing in is optional. Reading every page, including the resume, never requires it. When you sign in, Google shares your name, email address, and a Google account identifier with us through Amazon Cognito. We use them only to show who is signed in, to label notes you post, and to know which account sent a contact message.
- Tech Forum posts and replies are public and show your Google display name. Your email address is never shown to others. When you delete a post, its text is erased.
- Authenticator app link. To post in the Tech Forum, you link an authenticator app once. We store the app's secret key, encrypted at rest, to check your 6-digit codes. It is never shown again and can be reset on request.
- Contact form messages (name, email, comment, and the signed-in Google account) are stored so we can reply, and are emailed to our support inbox.
- Translation requests send the visible page text to Amazon Translate. Nothing you type is translated.
- Security and operations data. Like most websites, our hosting (Amazon CloudFront, AWS WAF, and Amazon API Gateway) records IP addresses, request paths, and browser details to block attacks and keep the site healthy.
Cookies and browser storage
We use only what is strictly necessary for the site to work. We use no advertising, analytics, or cross-site tracking cookies.
__Host-wf_session: a random, secure, HttpOnly cookie that keeps you signed in for up to 12 hours. It is set only after you choose to sign in, and is removed when you sign out.__Host-wf_login: a short-lived (10-minute) secure cookie that protects the Google sign-in step from forgery.- Cookies set by
auth.whitefeathers.org(Amazon Cognito) and by Google during sign-in, under their own policies. - Browser storage (not cookies) that remembers your language choice and that you dismissed the cookie notice.
Selling and sharing
We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We do not use or disclose sensitive personal information to infer characteristics about you. Because nothing is sold or shared, there is nothing to opt out of, and browser Global Privacy Control signals are honored by default.
Service providers
We run the site on Amazon Web Services (AWS), which processes data on our behalf. Google provides sign-in. We do not give your information to anyone else unless the law requires it.
How long we keep it
- Sign-in sessions: deleted when you sign out, or automatically within 12 hours.
- Your account record in Amazon Cognito: until you ask us to delete it.
- Forum posts and contact messages: until you delete them (forum), ask us to delete them, or we no longer need them.
- Authenticator app link: until you ask us to reset it or delete your account.
- Security logs: according to our hosting providers' log retention.
Your California privacy rights
You can ask to know what personal information we hold about you, and ask us to correct or delete it. You can also ask to limit the use of sensitive personal information, although we do not use it beyond providing the site. We will not discriminate against you for using these rights. To make a request, email support@whitefeathers.org from the address on your Google account, or name an authorized agent. We may need to confirm your identity before acting on a request.
Children
WhiteFeathers.org is not directed to children under 13, and we do not knowingly collect their personal information.
Changes and contact
If this notice changes, we will update the date above. Questions? Email support@whitefeathers.org.