Privacy Policy

What we collect

To issue you a ballot we collect your email address. We also record a one-way hash of your IP address and browser signature. Hashes cannot be reversed into the original values; they exist so we can detect coordinated voting without storing anyone's browsing details.

Email addresses are stored encrypted.

Why we collect it

Solely to guarantee one ballot per person and to send you a verification code and a copy of your ballot. Your address is never sold, shared with nominees, or used for marketing unless you separately opt in.

Your ballot is not linked to your identity publicly

Nothing published after the ceremony identifies how any individual voted.

How long we keep it

Voter records are retained until 90 days after the ceremony, then deleted. Aggregate counts and the audit trail are retained indefinitely; neither contains personal data.

Your rights

You may request a copy of your data or its deletion at any time by writing to the contact address on this site. Deleting your record before voting closes will also void your ballot, since the two cannot be separated.

Cookies

A session cookie keeps you signed in while you complete your ballot. We use no advertising or cross-site tracking cookies.