This Privacy Policy describes how Don't Pace the Frontier (“we,” “us,” or “the site”) collects, uses, and shares information when you visit or sign the community statement at dontpacethefrontier.com (including related development and staging hostnames).
This is a community petition site. It is not affiliated with any AI lab or with “Pacing the Frontier.” Signatures reflect personal views only.
1. Information we collect
1.1 When you sign with X
To verify that you are a real person and allow one signature per account, we use X (Twitter) OAuth. When you authorize the app, we receive and store:
- Your X user ID (stable internal identifier)
- Your X username (handle)
- Your display name on X
- Your profile image URL (if provided by X)
We do not receive or store your X password. We do
not post to X on your behalf. We request the minimum
OAuth scopes X requires for profile login:
users.read and tweet.read. X requires both
for the “current user” profile endpoint even though we only use your
name, handle, and avatar once to record a signature—we do not read
your posts or timelines. We do not request long-lived “stay
connected” access (offline.access).
1.2 Information you choose to provide
When signing, you may optionally submit:
- Company or organization
- Title or role
- A public comment
Company and title are self-reported. We do not verify employment through X. Signatures always show your name and X handle from your authorized profile (there is no anonymous option).
1.3 Information we do not collect
- Email address (unless you contact us separately by email)
- Payment or billing information
- Precise geolocation from your device
- Government ID or sensitive identity documents
1.4 Technical and log data
Like most websites, our hosting provider (Cloudflare) may process standard technical data such as IP address, browser type, request timestamps, and security signals (e.g. to prevent abuse). We use this for operation, security, and reliability—not to build advertising profiles.
2. How we use information
We use the information above to:
- Record and display your signature on the public statement
- Prevent duplicate signatures (one per X account)
- Show optional company / title / comment you provided
- Operate, secure, and improve the site
- Respond to abuse, legal requests, or support inquiries
We do not sell your personal information.
3. What is public
The petition is public by design. When you sign, we display:
- Your name (from X)
- Your X handle (linked to your X profile)
- Your avatar
- Optional company, title, and comment you provided
Do not include information in a comment that you are not comfortable making public.
4. Sharing
We share information only as needed to run the site:
- X (Twitter): authentication is handled by X under their terms and privacy policy. See x.com/privacy.
- Cloudflare: hosting, DNS, and edge infrastructure. See Cloudflare’s privacy policy.
- Legal / safety: if required by law, or to protect rights, safety, and integrity of the service.
Public signature data is visible to anyone who visits the site and may be indexed, copied, or reshared by third parties.
5. Cookies and local storage
We do not use third-party advertising cookies. The browser may store ordinary technical data required for the site to function. OAuth state for Sign with X is handled server-side during the login flow.
6. Data retention
We keep signature records for as long as the statement remains online, or until you successfully request deletion (see below), unless we must retain data longer for security or legal reasons. Temporary OAuth state used during sign-in expires and is deleted after a short period (on the order of minutes).
7. Your choices and rights
Depending on where you live, you may have rights to:
- Access the personal data we hold about your signature
- Correct inaccurate optional fields
- Request deletion of your signature
- Object to or restrict certain processing
To request access or deletion, contact us using the email below and include your X handle (and ideally the email associated with your X account if needed to verify ownership). We may ask for reasonable proof that you control the X account before changing or removing a signature.
You can also revoke the app’s access in your X account settings at any time. Revoking access does not automatically remove a signature already recorded—use the contact email to request removal.
8. Children
The site is not directed to children under 13 (or the equivalent minimum age in your jurisdiction). Do not sign if you are under that age.
9. International processing
The site is hosted on Cloudflare’s global network. Your information may be processed in the United States and other countries where Cloudflare or we operate infrastructure.
10. Security
We use reasonable technical measures (including HTTPS and access controls on infrastructure) to protect data. No method of transmission or storage is 100% secure.
11. Changes
We may update this Privacy Policy from time to time. We will change the “Last updated” date above. Continued use of the site after changes means you accept the updated policy.
12. Contact
Privacy questions or deletion requests:
privacy@dontpacethefrontier.com
If that inbox is not yet active, use the contact method listed on the site homepage or the developer contact used for the X application until domain email is configured.