Voices—% AI vs —% Human+ Today#AIvsHuman Voices—% AI vs —% Human+ Today#AIvsHuman Voices—% AI vs —% Human+ Today#AIvsHuman
← Pick Your Future
Legal · Privacy

Privacy Policy

Last updated · May 9, 2026

What we collect

To enforce the one-vote-per-twenty-four-hours rule and prevent abuse, we generate a pseudonymous device identifier — a one-way hash derived from limited browser and device signals such as user agent, language, screen size, timezone, canvas, and WebGL characteristics.

We do not store the raw browser characteristics, and we do not use this identifier to identify you by name. However, because the identifier can recognize the same browser over time, it may be considered personal data under some privacy laws, including the GDPR.

We store the identifier, your vote (AI Future or Human Future), the text of any argument you submit, the timestamp, and any likes or reports you make on other arguments.

Legal basis

We process pseudonymous device identifiers, votes, arguments, likes, reports, timestamps, and moderation signals on the basis of our legitimate interests under Article 6(1)(f) GDPR — operating the site, preventing abuse and spam, enforcing voting integrity, protecting the public record, maintaining site security, and moderating harmful content.

We balance these interests against user privacy by not requiring accounts, names, email addresses, or profile information; by not using data for advertising or cross-site tracking; by storing only hashed or pseudonymous identifiers where possible; and by limiting use of these identifiers to site functionality, moderation, abuse prevention, and security.

What we don’t collect

We do not store IP addresses in our application database. We do not require accounts, names, or email addresses. We do not place behavioral tracking cookies or third-party advertising pixels.

We do not build user profiles, sell data, or share identifiable information with anyone for marketing purposes.

Our infrastructure providers may process IP addresses and request metadata for hosting, security, rate limiting, abuse prevention, and delivery of the site. See “Third-party service providers” below.

Cookies, browser storage, and device identifiers

The site uses minimal browser storage and a pseudonymous device identifier strictly for essential site functionality, voting integrity, abuse prevention, moderation, and security. We do not use these technologies for advertising, cross-site tracking, or analytics profiling.

Specifically:

  • HTTP-only session cookie (pyf_session) — links your device to its pseudonymous session in our database. Required for voting and to gate likes and reports behind voting.
  • Local storage keys prefixed pyf_ — store the device identifier hash, last vote timestamp, age-gate acceptance, and cookie banner dismissal. The device identifier hash may be submitted to our server when needed to enforce voting limits, likes, reports, or abuse-prevention rules.

Third-party service providers

We use the following service providers to operate, secure, and moderate the site. These providers may process limited technical or content data only as necessary to provide their services. Each operates under its own privacy policy:

  • Vercel — hosting, serverless functions, and edge delivery. Vercel may process request metadata, including IP addresses and technical logs, for hosting, security, debugging, and operation of the service.
  • Supabase — database storage of votes, arguments, likes, reports, timestamps, and pseudonymous session identifiers.
  • Cloudflare — CDN, DDoS protection, security filtering, and traffic analytics. We do not intentionally send names, emails, accounts, or profile data to Cloudflare. Cloudflare may process technical request data such as IP addresses for CDN delivery, security, and DDoS protection.
  • Upstash Redis — rate limiting and abuse prevention. We use short-lived keys or hashes to limit repeated actions and prevent spam or abuse.
  • OpenAI Moderation API — automated screening of submitted argument text for safety and abuse prevention. Submitted text is sent to OpenAI’s Moderation API for automated safety screening. According to OpenAI’s API data controls, Moderation endpoint data is not used for training and is not retained for abuse monitoring or application state.

We do not sell personal data, and we do not use these providers for behavioral advertising or cross-site tracking.

Data retention

Submitted votes and arguments may be stored permanently as part of the public record of the site.

Pseudonymous device identifiers are retained for as long as necessary to enforce voting integrity, prevent vote manipulation, detect repeated abuse, support moderation context, maintain accountability for likes and reports, preserve the integrity of public voting results, and protect the security of the site.

Because votes, arguments, likes, reports, and moderation decisions may remain part of the public record, pseudonymous device identifiers may be retained for the lifetime of the service unless they are no longer needed for the purposes described in this policy.

We do not use these identifiers for advertising, cross-site tracking, or building behavioral profiles. We may delete, rotate, or further aggregate identifiers when they are no longer required for voting integrity, moderation, abuse prevention, or security purposes.

Your rights

Where applicable, you have rights under the GDPR, CCPA, and similar regulations to request access to, correction of, or deletion of any personal data we hold about you.

Because we do not require accounts, names, or emails, we may not be able to verify that a specific vote, argument, or session belongs to you. To make a request, contact us with enough information to identify the relevant data — for example, the comment ID or the approximate time of submission.

If you submitted an argument publicly, it may be visible to other users. If you want a specific argument removed, contact us with the comment ID or enough information to identify it. We may remove public content at our discretion, especially if it violates our rules, safety standards, or applicable law.

Changes

We may update this policy. The “Last updated” date at the top reflects the most recent revision. Material changes will be communicated on the site.

Contact

Questions about privacy? Email hello@onevote.today.

← Return to site