Privacy Policy

CasePredictor helps you estimate USCIS case timelines and, if you sign in, track your own cases. You can use the calculator and other tools without an account. This policy explains what we collect, how we use and protect it, who we share it with, how long we keep it, and how to delete it.

In short: we never sell your data. Our USCIS credentials stay on our servers, never in your browser. You can delete your account and all data at any time. See also our Terms of Service.

Last updated: July 23, 2026.

Using the site without an account

If you do not sign in, the calculator, trends, and visa-bulletin tools store nothing about you on our servers. Your inputs stay in your browser and in the page link you can bookmark or share. We set no advertising cookies and run no cross-site tracking.

Information we collect when you sign in

An account is optional. It lets you save cases and see their live USCIS status. When you use it, we collect only what we need:

• Your email address — from Sign in with Google, or from the email you enter to receive a magic link. We never set or store a password.
• Case details you enter — form type, an optional USCIS receipt number (the 13-character code such as IOE0912345678), receipt date, and, for I-485, the preference category, country, and priority date.
• USCIS case status we retrieve for you — if you save a receipt number, we query the official USCIS Case Status API and store the current status, form type, submitted and last-action dates, the status history and timeline, and the raw response, so we can show your timeline and detect changes.

Information we do not collect

We deliberately keep this narrow. We do not collect:

• Geolocation or precise-location data.
• Financial, payment, or banking information.
• Medical, health, or biometric information.
• Genetic information or family-history information.
• Your contacts, photos, or files.
• Government identifiers beyond the receipt number you choose to enter.
• Advertising or cross-site tracking identifiers.

How we use your information

We use your information only to run the service:

• Create and secure your account.
• Save your cases and show them back to you on any device.
• Retrieve and display your USCIS case status and history, and detect changes.
• Improve processing-time estimates for everyone, using de-identified data (described below).

We do not use your data for advertising, ad targeting, or building marketing profiles.

How we share information, and how we do not

We do not sell your personal information — not for money, and not for any other benefit or consideration. We do not share it with marketers, advertisers, or data brokers. Your information is shared only in these limited ways:

• Service providers who run the service for us, and only for that purpose:
  • Supabase — stores your account and case data.
  • Google — only if you choose Sign in with Google; it confirms your identity and provides your email address.
  • Cloudflare — hosts the site and keeps basic request logs for about 24 hours.
• Anonymous community statistics — described in the next section.
• Legal reasons — if required by valid legal process, or to protect the rights, safety, or security of our users or the service.

Our service providers act only as processors on our behalf. They are contractually bound to protect your information consistent with this policy, and are prohibited from using or disclosing your information — including any de-identified or anonymized data — for their own purposes, or for any purpose other than providing the service to us, without your active consent.

Anonymous community statistics (your choice)

To improve predictions for everyone, a saved case can contribute to anonymous aggregate statistics. This is opt-out: it is on by default, and you can turn it off per case.

• What is shared: only the receipt number is added to a shared tracking list — never your name, email, or account.
• The benefit: more receipts make processing-time estimates more accurate for everyone.
• The risk:a receipt number, on its own, can be used to look up that case's public USCIS status. It is not linked to your identity in our system.
• The limit, and impact on others:we share only your own case's receipt number. We do not collect or share genetic, family-history, or any other person's information, so contributing does not reveal anything about anyone else.

To opt out, uncheck the contribution box when you add or edit a case, or email us to remove a receipt.

How long we keep your data

• Saved cases and their USCIS status and history — kept until you delete the case or your account.
• Dormant accounts — if you do not sign in for 24 months, we will email you and then delete your account and its data if you do not return.
• Operational API logs (receipt number, HTTP status, and timestamp of each status check) — up to 90 days, then deleted.
• Contributed receipt numbers — kept while you contribute the case; removed when you opt out or delete it, and no longer checked once a case has been decided for three months.
• Hosting logs — Cloudflare keeps basic request logs for about 24 hours.

Deleting your data and closing your account

You are always in control of your data.

• Delete a single case — remove it from My Cases at any time. This deletes the case, its stored status and history, and removes its receipt number from the community list.
• Delete your entire account, yourself — sign in, open Settings from the account menu, and choose Delete account. This immediately and permanently deletes your account and all associated data: your saved cases, their stored USCIS status and history, and any contributed receipt numbers.
• Or ask us to do it — email [email protected] from your account email address, or use the contact form.

Closing your account means deleting it and all associated data. Self-service deletion is immediate; email requests are completed within 30 days — usually much sooner — and confirmed by email. Deletion is permanent and cannot be undone.

If we have a data breach

If we learn of a security breach that affects your personal information, we will notify you without undue delay and, where feasible, within 72 hours of confirming it. We will email your account address and explain what happened and what information was involved. We will also tell you the steps you can take — for example, review your official USCIS account, stay alert for phishing messages, and change any password you may have reused on other sites. We will notify the relevant authorities where the law requires it.

Security, and USCIS credentials

Your data is sent over HTTPS and stored encrypted at rest by Supabase. Access is enforced by database row-level security, so each signed-in user can read only their own rows.

Our USCIS API credentials and access tokens stay on our servers only. All calls to the USCIS Case Status API are made from our backend (server-side functions), with the USCIS client ID, client secret, and OAuth tokens held in encrypted server-side secrets. They are never placed in the website code, exposed to your browser, or shared, and your browser never contacts USCIS directly.

Change of ownership or business transfer

If CasePredictor is acquired, merged, transferred, or wound down, we will notify account holders by email in advance. Any successor will be required to honor a privacy policy at least as protective as this one and aligned with it. Before any transfer takes effect, you will have the chance to export or delete your data, and we will not hand your data to a party with weaker practices than those described here without your consent.

Changes to this policy

We may update this policy. For minor or clarifying edits, we revise the "Last updated" date above.

For material changes — such as new types of data, new sharing, or changes to retention — we will notify account holders by email, provide a plain-language summary of what changed, and ask for your active consent by having you accept the updated policy the next time you sign in. The change will not apply to your account until you accept it.

Your California privacy rights (CCPA/CPRA)

If you are a California resident, you have the right to know what personal information we hold, to access a copy, to correct it, and to delete it. You also have the right to opt out of the "sale" or "sharing" of personal information.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising, so there is nothing of that kind to opt out of. Our community statistics use only de-identified receipt numbers. We will not discriminate against you for exercising your rights. To exercise any right, email [email protected] from your account address, and we will respond within the timeframes the law requires.

Cookies

CasePredictor sets no cookies of its own. Your browser may receive functional cookies from Cloudflare for bot protection (for example __cf_bm); these do not track you across sites. Your theme preference and login session are stored in your browser's localStorage, on your device.

Children's privacy

CasePredictor is intended for adults navigating the USCIS process. We do not knowingly collect data from children under 13.

Contact us

Questions, requests, or concerns? Email [email protected] or use the contact form.