Information we use
- When you sign in with Google, we store your Google provider identifier, name, email, profile image URL when available, and account timestamps. We do not receive your Google password.
- You may add an optional phone number. It is not shown publicly and is not required for current polls.
- We store your polls, answer options, uploaded covers, settings and moderation reports.
- Authenticated votes are associated with your internal account identifier. Anonymous votes use a keyed one-way hash of your normalized IP address, not the raw address, to enforce voting limits.
Voting privacy
Individual vote records and hashed IP identifiers are not publicly readable. Creators receive aggregate results and activity totals, not voter identities. Platform operators with privileged database access can access stored records for administration and security.
The same IP hash can recur across polls. It is pseudonymous data, not a promise of complete anonymity. The application does not expose it to poll creators or other visitors.
Cookies and service providers
We use a session cookie for sign-in and a short-lived cookie to verify the Google OAuth flow. The application does not include advertising trackers or third-party analytics. Google handles its own authentication processing under its policies. Profile images may be loaded from Google. Hosting providers and reverse proxies may process IP addresses in connection or security logs.
Retention and your requests
Account and poll records remain while needed to operate the platform. Votes remain with their poll; deleting a poll removes its associated votes and reports. Rate-limit counters are kept only in server memory, keyed by the hashed identifier, and expire after about one minute. PocketBase activity logs are configured for seven days without IP or account-ID logging. Hosting logs and backups have separate retention settings controlled by the operator.
Use your profile to correct your name or optional phone number, and your dashboard to manage your polls. For account access, correction or deletion requests, use the contact page. We may need to verify account ownership before acting. Some information may need to be retained for security or legal obligations.
Security and changes
We use server-side access controls and encrypted production connections. No online service can guarantee absolute security. This policy may change as the service evolves; review it before providing additional information.