Privacy Policy

Last updated: March 29, 2026

NewLastName.org ("we," "us," or "our") respects your privacy. This Privacy Policy explains what information we collect, how we use it, and your rights regarding your data.

The short version: Your most sensitive information (Social Security number, driver's license number, passport number) never leaves your device. It is filled into your forms directly in your web browser using client-side processing and is never transmitted to or stored on our servers.

1. Information We Collect

1.1 Information You Provide

When you use our form-filling tools, you may provide:

  • Standard personal information: Full legal name (current and new), date of birth, address, phone number, email address, spouse name, place of birth, parent names
  • Name change details: State, county, name change type, reason for change
  • Email address: If you sign up for launch notifications or create an account

1.2 Information We Never Collect

The following information is processed entirely in your web browser and is never sent to our servers:

  • Social Security numbers (SSN)
  • Driver's license numbers
  • Passport numbers

These sensitive fields are filled into your PDF forms using client-side JavaScript (pdf-lib) running entirely in your browser. We have no technical ability to access this data.

1.3 Automatically Collected Information

We may collect standard web analytics data including:

  • IP address (anonymized where possible)
  • Browser type and version
  • Pages visited and time spent
  • Referring URL

We use Google Analytics for this purpose. You can opt out using Google's opt-out browser add-on.

2. How We Use Your Information

We use your information solely to:

  • Fill out government name change forms on your behalf
  • Save your progress so you can return and complete your forms
  • Send you launch notifications (if you opted in)
  • Authenticate your account (magic link login via email)
  • Improve the Service through aggregated, anonymized analytics

We do not sell, rent, or share your personal information with third parties for marketing purposes. Ever.

3. How We Store Your Information

3.1 Form Data

Your form data (names, addresses, dates) is stored in an encrypted database while your session is active. This allows you to save progress and return later. Form data is encrypted at rest using industry-standard encryption.

3.2 Generated PDFs

Completed PDF forms are generated on our server and made available for download. Generated files are automatically deleted after 30 days.

3.3 Session Data

We use anonymous session tokens (UUIDs) to associate your form data with your browser session. No login is required for basic use. Sessions that have been inactive for more than 30 days are automatically deleted.

4. Third-Party Services

We use the following third-party services:

  • Resend (resend.com) — transactional email delivery for account authentication and launch notifications
  • Google Analytics — anonymized web traffic analytics
  • AI providers (for form field detection only) — when you upload a custom PDF, we may use AI services to detect form field names. Only field names and structure are sent, never your personal data.

5. Cookies

We use minimal cookies:

  • Session cookie: Stores your anonymous session ID so you can save and resume progress
  • Analytics cookies: Google Analytics cookies for aggregated traffic data (you can opt out)

We do not use advertising cookies or tracking pixels.

6. Your Rights

You have the right to:

  • Access: Request a copy of the personal data we hold about you
  • Delete: Request deletion of your data at any time by emailing us
  • Correct: Update or correct your information through the app or by contacting us
  • Opt out: Unsubscribe from marketing emails at any time
  • Portability: Request your data in a standard format

California Residents (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act:

  • Right to know what personal information is collected
  • Right to delete personal information
  • Right to opt out of the sale of personal information (we do not sell your data)
  • Right to non-discrimination for exercising your rights

7. Data Security

We implement security measures to protect your information:

  • HTTPS/TLS encryption for all data in transit
  • Application-layer encryption for stored form data
  • Client-side processing for the most sensitive fields (SSN, DL#, passport#)
  • No sensitive data in server logs or error messages
  • Automatic data deletion after retention period

No system is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

8. Children's Privacy

The Service is not directed to children under 13. We do not knowingly collect information from children under 13. The minor name change feature is intended for use by parents or legal guardians filing on behalf of a child.

9. Data Retention

  • Form sessions: Automatically deleted after 30 days of inactivity
  • Generated PDFs: Automatically deleted after 30 days
  • Account data: Retained until you request deletion
  • Email subscriptions: Retained until you unsubscribe

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will post changes on this page and update the "Last updated" date. Continued use of the Service after changes constitutes acceptance of the updated policy.

11. Contact

Questions about this Privacy Policy? Email us at privacy@newlastname.org.

Terms of Service Back to Home