Privacy Policy

Last updated: 2026-06-26

1. Data we collect

• Vote records: the ethnicity or tag you submit, the ISO country code derived from your IP via Cloudflare headers, and a timestamp.
• Pseudonymous fingerprint: a SHA-256 hash of your IP address, a truncated user-agent string, and a server-side salt. The raw IP and user-agent are not stored. The salt is rotated periodically; rotation invalidates all previous hashes.
• Local browser storage: a small flag indicating which options you have voted for, used to prevent accidental re-voting from the same device. You can clear this any time via your browser's site data settings.

2. Legal basis (GDPR)

We process the data above on the basis of legitimate interest(Art. 6(1)(f) GDPR) to operate the service and to prevent abuse. The pseudonymous fingerprint is the least intrusive technical means available to deduplicate votes.

3. Third-party services

• Cloudflare (hosting, CDN, bot mitigation)
• Supabase (database)
• Google AdSense (advertising) — see Google's own policies

4. Your rights

Because we do not store directly identifying information, we cannot link a request to a specific user. You may still email us to request information about how data is processed.

5. Contact

Reach us at privacy@example.com.