Privacy policy
Updated October 9, 2026. This site is published by Herb Morgan for State Controller 2026, FPPC #1480103.
When you sign up
The form asks for your email address and permission to send campaign updates. We save your email, the wording you agreed to, the time of your signup and the page where you signed up. The checkbox is not selected for you.
Signup records are stored in Cloudflare D1. They are not published on this site. Signing up does not verify your voter registration or establish your political affiliation.
Stopping emails or requesting removal
Campaign emails sent from this list must include an unsubscribe link. You can also request removal or ask about your information through our contact form or by emailing [email protected]. Include the email address you used to sign up.
Contact messages
The Contact us form prepares a message addressed to [email protected] in your email app. The website does not submit or store the form contents. If you send the draft, the campaign receives your message and the information you include. Do not send sensitive claim records or financial account details.
Browser storage and abuse prevention
Your browser remembers when you dismiss the signup window for 14 days, or when you subscribe for one year. Clearing your browser storage removes that preference.
To limit repeated form submissions, the signup service temporarily stores a hash derived from the network address and hour. This record is separate from the email list and expires after two hours. Cloudflare also processes requests to operate and protect the website.
Use, access and retention
Signup information is used to manage the update list and record your permission. Campaign personnel responsible for the list may access these records. Cloudflare provides the hosting and database services. Signup information is not published or sold through this website.
You may ask the campaign to correct or remove your information. Unsubscribe records and consent records may need to be retained to respect your preference and document the signup. Access and deletion requests go to [email protected].
Analytics and sharing
We use Google Analytics to measure visits, page views, referring websites, device information and approximate location, including city or region where available. Google Analytics uses cookies to distinguish visits. These reports help us understand how the site is used; approximate location does not identify a registered voter. We do not send signup email addresses or contact-form messages to Analytics. Advertising personalization and Google signals are disabled in this site’s tag. No Facebook advertising pixel is installed.
The Analytics tag does not load on local previews or when your browser sends Global Privacy Control or Do Not Track. You can also block Analytics through your browser or use Google’s Analytics opt-out add-on. See Google’s privacy policy for its handling of data.
Share buttons open the service you choose. Those services apply their own privacy policies. Merely reading a story does not send a share request to Facebook, Reddit, LinkedIn or X.
Other websites and policy updates
Links to state agencies, news publications and campaign websites take you to services with their own privacy policies. This policy describes MaliaCohen.org, not those websites.
If collection or tracking changes, this page will be updated with a new review date. For questions about this policy, contact us.