Privacy
No accounts, no login, no wallet. Here is the entire list of what we keep.
The name you submit
We store the first name exactly as you typed it, plus a lowercase version used for matching. A first name on its own doesn’t identify you, and it’s the only attribution a card ever carries.
A cookie that says “you”
When you vote we set one cookie holding a random ID signed by our server. It has no name, no email, nothing about you — it only lets us apply the rule of one like per person per 24 hours. It is httpOnly, so page scripts can’t read it, and it lasts a year. Clear your cookies and you get a fresh one.
A rough device fingerprint
Alongside each vote we record a hash of some ordinary browser details — your user agent, language, screen size, timezone. This is personal data, so we’re telling you plainly. We store only the hash, we never use it to block a vote, and it exists solely so that obvious ballot-stuffing is visible in our logs.
A hashed IP
Votes are logged with a one-way hash of your IP address. We can’t recover the address from it, and we never rate-limit by IP — phones share addresses and change them all day.
Turnstile
Submitting a name and voting are protected by Cloudflare Turnstile, which checks that you’re a person and not a script. Cloudflare receives the request as part of that check.
What we don't do
No analytics, no ad trackers, no third-party scripts beyond Turnstile, no selling anything to anyone. There is nothing to sell.