Privacy
No sign-up is needed to use a voting plan. Here’s what VPP collects and how it is used.
Your voting plan
Making a plan does not ask for or store your name, email, home address, signature, or ballot choices. You choose an area, election, and voting method. These selections appear in public plan links, so a plan is not a private personal record.
We don’t create a lasting visitor ID or use browser storage to build a profile. Administrator sign-in uses separate authentication cookies. Protected previews may also use the hosting provider’s sign-in and cookies.
How we measure use
We count actions such as visits, plan selections, downloads, sharing attempts, link clicks, and errors. These counts help us improve the site. They don’t identify individual visitors or prove that a download, message, or vote was completed.
We respect Do Not Track and Global Privacy Control browser settings by not sending these events. You can still use plans. We don’t embed advertising widgets or third-party analytics scripts.
What activity records contain and how long we keep them
VPP sends events to its own endpoint and stores them in Supabase. They may include a time rounded to the minute, area, election, voting method, release ID, demonstration flag, page category, export format, share channel, and fixed error code. They do not contain IP addresses, user agents, referrers, recipients, free-form text, or visitor IDs.
A scheduled process combines events into daily counts and deletes individual events older than 30 days. Daily counts retain the date and the categories above, but not release IDs. Daily counts have no automatic expiry.
Downloads and sharing
Downloads go to your browser; copied text goes to your clipboard. VPP does not upload files to your Google account. Email and device sharing open tools you control, and VPP does not send messages for you.
Official lookup tools and other external sites have their own privacy practices. They may ask for personal information that VPP does not collect.
Hosting and security records
Vercel and Supabase process requests to run the site. Their logs, security records, and backups may contain information such as IP addresses. The 30-day activity-record limit does not apply to all provider records or backups.
Don’t put personal information in a VPP link. Hosting providers receive the URL before VPP checks it. Use the site’s sharing controls to copy a link with only public plan selections.
Backups and administrator records
Deleting an activity record does not immediately remove older backups. Restored data must go through the retention process before normal service resumes. Administrator authentication and security records have separate purposes and retention periods.
Supporting the project
Stripe handles checkout and monthly support. It collects the contact, billing, and payment information needed to process payments. VPP can access payment and subscription records in Stripe, but does not receive your full card number.
Payment records are separate from individual voting-plan activity records and their 30-day limit. We do not attach your plan selections to payments. Payment-event logs contain event IDs and status categories, not card details or billing addresses. Stripe has its own privacy and retention practices.