Privacy policy

Effective July 11, 2026. Shorter than the watch list, and unlike most privacy policies, load-bearing.

What we collect

• Discord identity, when you sign in: your Discord id, username, display name, and avatar. Nothing else is requested; the OAuth scope is "identify" only. No email, no server list, no messages.
• Votes: every vote you cast or change, permanently, with timestamp, your account, and the IP address and country it came from.
• Sign-ins: timestamp, IP, and country of each login.
• Form submissions: what you typed, when, and the IP it came from (contact and organizer forms).

Why the IP logging

Vote integrity. A public ballot with anonymous unlimited accounts is a poll, and the front page explains what we think of those. IPs let us detect ballot stuffing. That is their only use.

Who sees what

• Public: your username, your votes, when you cast them, and vote country. That is what "on the record" means and the terms say the same thing.
• You: everything we hold about you, shown on your account page, IPs included.
• Site operator only: IP addresses and form contents. IPs are never published and never sold. Nothing here is sold; there is nothing to sell it to. The site has no ads, no trackers, no analytics scripts, and no cookies except the session cookie that keeps you signed in.

Where it lives

Data is stored on Cloudflare infrastructure (the database and this site run there). Cloudflare sees traffic the way it does for a large fraction of the internet.

Deletion

Ask via the contact page from the email or account involved. We delete accounts, form submissions, and login records on request. Vote events are anonymized rather than deleted (the vote stays in the tally and the log, your name comes off it), because an append-only record that people can quietly leave is neither.

Changes

Same rule as everything else: changes to this policy are announced and logged before they take effect.