Privacy
Privacy by design.
The short version
We do not run accounts, we do not use cookies, and we do not store the messages you write to your MP. We use only privacy-friendly, aggregate analytics (see below) and never follow you across other sites. The site is built to need as little of your data as possible.
Finding your MP
When you use the “Find my MP” tool, your postcode is sent to our server once. From there, your postcode is forwarded to postcodes.io to find your constituency; then only the resulting constituency name (not your postcode) is sent to the UK Parliament Members API to find your MP. We do not save your postcode and we do not log it against you. The result is returned to your browser and nowhere else.
Your message to your MP
The letter you write stays in your browser. When you choose “Open in your email app”, it is handed to your own email programme so that the message comes directly from you. This site never sends email and never sees the final message.
Sharing
The share buttons are ordinary links to X, Facebook, WhatsApp and email. Those services have their own privacy policies once you leave this site.
Rate limiting and your IP address
To deter abuse, the MP-lookup endpoint is rate-limited. For this we briefly process your IP address to count recent requests. Your IP is pseudonymised with a keyed hash (HMAC) before being used as a counter key, is never stored in raw form, and is not linked to your postcode or message. If a hosted rate-limit store (Upstash Redis) is configured, only this short-lived keyed-hash counter is kept there; otherwise the counter lives in memory and is discarded within a minute.
Analytics
We use Vercel Web Analytics to understand how many people visit the site and which pages they read, so we can improve it. It is privacy-friendly by design: it sets no cookies, does not collect personal information, does not build a profile of you, and does not track you across other websites. It records only aggregate, anonymised information such as page views, referrer and approximate country.
Security
The MP-lookup endpoint validates input, limits request size, and is rate-limited. The site is served over HTTPS with a nonce-based content-security policy and related protective headers.
Contact
This is an independent campaign site built by Lextrapolate. It is not affiliated to any political party or organisation named on the site.