Privacy policy

Last updated November 10, 2026

This petition is operated by [Petition sponsor name] ("we"). This policy explains what we collect at petition-against-cms-2027-physician-fee-schedule-reduction.com, why, and the choices you have. Contact: contact@petition-against-cms-2027-physician-fee-schedule-reduction.com.

What we collect

When you sign: your name, email, state, ZIP code, specialty or role, optional NPI, optional comment, your display and newsletter choices, and the referring site or campaign code. When you sign, we store your drawn (or typed) signature, the time, your browser type, a keyed hash of your network address, and the exact version of the petition text you affirmed. This signing record is kept with your signature for as long as the signature itself, as evidence that you signed; we can match the hash to an address only if presented with that address. When you share a story: the name you choose to display, email, specialty, state, story and optional video link. For abuse prevention we process your IP address transiently; a keyed hash of it used for rate limiting is discarded within about an hour. We never store your raw IP address.

How we protect it

Emails are stored as a keyed hash (for duplicate detection) and encrypted with AES-256-GCM (to send confirmation and update emails). NPIs are encrypted at rest and never displayed publicly. Drawn signatures are never displayed on this website; they are kept only for delivery of the petition to Congress and CMS. Data is stored with Cloudflare in its D1 database. Petition signatures are not health information; we ask that stories contain no patient-identifying details.

How we use it

• To verify and count your signature.
• To show your first name, last initial, specialty and state on the signer wall, only if you opted in.
• To send campaign updates, only if you opted in.
• To deliver the petition to Congress and to the office of the CMS Administrator, and to share aggregate counts. Coalition partners may receive name, state, specialty and ZIP; they receive email only for signers who opted into updates.

We do not sell your data and we do not use advertising trackers.

Service providers

Cloudflare (hosting, database, email delivery and Turnstile bot protection) processes data on our behalf. Turnstile may process technical signals from your browser to tell people from bots.

Your rights

You can permanently delete your signature, comment and story at any time on the delete my data page. Every update email includes the same link. If you are in the EU, UK or a US state with privacy laws, you may also request access or correction by emailing us; we respond within 30 days. Our legal basis for processing is your consent, which you may withdraw at any time.

Retention

Unconfirmed signatures are deleted after 30 days. Confirmed signatures are kept until the campaign ends and then for no more than 24 months, unless you delete them sooner.