Most of this site works without collecting anything. Where it does collect something, this explains exactly what and why. Last updated 17 August 2026.
A receipt number identifies one person's immigration case, so it is treated as personal data throughout. When you check a status it is sent to the USCIS Case Status API and the answer returned to your browser. It is not written to a database, not written to a log, and never placed in the URL where it could leak through a referrer header.
Watching is the one place a receipt number is kept, because a case cannot be re-checked if the number was not kept. Email address and receipt number are encrypted together with AES-GCM, the record is filed under a one-way hash rather than under the address, and every notification carries a link that deletes it outright.
Requests are counted per caller for sixty seconds to prevent automated abuse. That counter is filed under a hash of the IP address combined with the endpoint, never the address itself, and expires within two minutes.
No advertising networks, no data brokers, no analytics suppliers, and none planned.
You can ask what we hold, ask for deletion, or unsubscribe at any time. Write to [email protected]. Because watches are encrypted and filed under a hash, we cannot search them by email address — use the link in the notification. That design protects you and constrains us in the same stroke.