Privacy policy

We collect the minimum needed to run a voting platform, and no more.

What we store

• **Account data**: your email address, username, a hashed password, and anything you choose to add to your profile.
• **Your activity**: the votes you cast, battles you create and comments you post.
• **Analytics**: page views and votes counted against an opaque, rotating session key. This key is not linked to your account and cannot be used to identify you.

What we do not store

• Raw IP addresses. Where we need to detect abuse, we store a salted one-way hash that lets us tell that two requests came from the same place, without telling us where that place is.
• Passwords in any recoverable form. They are hashed with bcrypt at cost 12.
• Any third-party tracking or advertising identifier. There are no third-party analytics scripts on this site.

Cookies

• A session cookie, so you stay signed in.
• A guest identifier, only if you vote while signed out, so your vote is counted once.
• An analytics session key.

All are first-party, httpOnly where possible, and none are shared with anyone.

Your rights

You can edit or clear your profile at any time from your account settings, and you can request account deletion by contacting us. Deleting an account removes your personal data; votes are retained in anonymised aggregate so that historical results remain accurate.

Changes

We will update the date at the top of this page whenever this policy changes.