Privacy Policy

What information is stored

• Email verification data handled through Supabase authentication.
• Vote records containing poll_id, option_id, user_id, and timestamp.
• Operational metadata required for abuse prevention, rate limiting, and service reliability.

What is intentionally not stored

• No email addresses are stored inside vote tables.
• No raw IP addresses are stored in voting tables.
• No comments, text submissions, or public profile pages exist on the platform.
• No advertising trackers or behavioural tracking systems are used.

Email verification

Before a vote is recorded, the platform requires email verification through a one-time verification link. This helps ensure that votes originate from real participants and reduces automated or repeated submissions.

Cookies

This platform uses a minimal set of cookies required for core functionality, verification, authentication, and security. No advertising cookies or behavioural tracking cookies are used.

• A temporary verification cookie may be used during the vote flow to remember a pending vote while the user completes email verification.
• A cookie consent cookie may be stored to remember whether the user accepted or rejected the site’s cookie notice.
• Authentication/session cookies may be set by Supabase to complete secure email verification and session handling.

Public output

Public pages display aggregated statistics only. These include counts, percentages, trend indicators, and summary sentiment scores. Individual voter records are never displayed publicly.

Infrastructure providers

Authentication and database infrastructure are provided by Supabase. These services process data solely for the purpose of operating the platform securely.

Data retention

Data is retained only for as long as necessary to operate the platform, maintain vote integrity, and comply with legal obligations.

User rights

Individuals may request deletion of their account and associated vote records where legally permitted. Requests may be reviewed and processed by the platform operator in accordance with applicable data protection laws.