EVIDENCE OF PII TRANSMISSION TO TWITTER/X  --  votesafe.org
Tested 9 September 2026 by Brandon Myers (brandonmyers.net)
====================================================================

SENTINEL INPUTS (fabricated; no real person):
  email typed : qzxwprobe.vbnm@example.com
  phone typed : 202-555-0137  (E.164: +12025550137)

EXPECTED HASHES (compute yourself to verify):
  SHA-256(email)         = 9cbb573fd9b9b398a2758fbb9c135fd09ae7a8a5992f2323ec1b3b0494e8b4c6
  SHA-256(phone E.164)   = a32507ffa4b2019d81282881a12e315c36d88cd350f261346cd5f0f91175cc2f

OBSERVED IN OUTBOUND REQUESTS TO TWITTER/X ('register-submit' event):
  [run1] 6 matching request(s)
    host: t.co   event: -
      email_address = 9cbb573fd9b9b398a2758fbb9c135fd09ae7a8a5992f2323ec1b3b0494e8b4c6  <== MATCH
      phone_number  = a32507ffa4b2019d81282881a12e315c36d88cd350f261346cd5f0f91175cc2f  <== MATCH
    host: analytics.twitter.com   event: -
      email_address = 9cbb573fd9b9b398a2758fbb9c135fd09ae7a8a5992f2323ec1b3b0494e8b4c6  <== MATCH
      phone_number  = a32507ffa4b2019d81282881a12e315c36d88cd350f261346cd5f0f91175cc2f  <== MATCH
  [run2] 6 matching request(s)
    host: t.co   event: -
      email_address = 9cbb573fd9b9b398a2758fbb9c135fd09ae7a8a5992f2323ec1b3b0494e8b4c6  <== MATCH
      phone_number  = a32507ffa4b2019d81282881a12e315c36d88cd350f261346cd5f0f91175cc2f  <== MATCH
    host: analytics.twitter.com   event: -
      email_address = 9cbb573fd9b9b398a2758fbb9c135fd09ae7a8a5992f2323ec1b3b0494e8b4c6  <== MATCH
      phone_number  = a32507ffa4b2019d81282881a12e315c36d88cd350f261346cd5f0f91175cc2f  <== MATCH

CONCLUSION: the email_address and phone_number values Twitter received
are byte-for-byte the SHA-256 hashes of the email and phone entered into
the VoteSafe registration form. Reproduced on two independent runs.