Privacy

There are no accounts, no ads, no analytics scripts, and no cookies. This page is the complete list of what exists.

What a vote stores

• Your answer, and your optional call on the majority.
• A country code derived from your connection at the edge. The IP address itself is not stored.
• A one-way code derived from your network address, the date, and a server secret. It exists so one connection cannot stuff the ballot, it cannot be reversed into the address, and it cannot link one day to another.
• An age bracket and a profession category, only if you chose to set them. Both are broad buckets from a fixed list.
• How many seconds you took to answer.
• A random ID your browser generated. It identifies a browser, not a person, and exists so one browser gets one vote per day.

If you turn on the reveal notification

• Your browser creates an anonymous push endpoint and we store that endpoint with its delivery keys, nothing else. It is used once a day at 13:00 UTC to send the result.
• Turning notifications off in your browser deletes the route; dead endpoints are pruned automatically.

Streak backup codes

A backup code is your streak numbers signed by the server so another device can trust them. The server stores nothing when it makes one; the code lives wherever you paste it and expires after 30 days.

What never exists

• No name, email, phone number, or account.
• No stored IP addresses and no device fingerprinting.
• No third-party trackers of any kind.
• No individual vote is ever shown. Reveals only include groups of five or more voters.

Where it lives

Your streak, your past answers, and your age and profession settings live in your own browser's local storage. Clear it and they are gone; the server cannot rebuild them. Vote records live in a database on Cloudflare's network and are used for one thing: computing the daily reveal.

Questions about any of this: ask@wisehumans.org.