How we verify every signature.

1. Block bots before the form

The signature form is protected by Cloudflare Turnstile — a behind-the-scenes check that quietly confirms you're a real person. You won't see anything if you're human; if you're an automated script, you can't get past it.

2. Email confirmation (48 hours)

After you sign, we send a confirmation link to your email. You have 48 hours to click it. Until you click, your signature stays private and is not counted in the public total. Unconfirmed signatures are deleted automatically.

This is the same approach the Canadian House of Commons uses for its official e-petition system. It's the single biggest reason the count we publish can be trusted.

3. Device tracking (anonymized)

When you sign, we record the IP address you signed from. This lets us notice if one device tries to sign hundreds of times pretending to be different parents. Every signature gets the IP at submission AND at email confirmation. We delete this device information 90 days after the petition closes.

This is the same model the UK Parliament's official petitions system uses. The source code for that system is public on GitHub.

4. What appears publicly is minimal

On our public list, your signature appears as just:

Your full last name, your email address, and your exact postal code are NEVER displayed publicly and are NEVER shared with any government office, party, or third party. See the privacy policy for the full data flow.