Privacy

This page says what AverageVoter keeps about you, why, for how long, and how to have it removed. It is written to be read, not scrolled past.

Your polls and votes are yours

A poll or vote you make is written to your own AT Protocol repository, under your account, and is public there. AverageVoter keeps a copy so pages load quickly. Deleting the record from your repository removes it from here too, once our indexer sees the change.

Signing in

Signing in stores a session on our server, with your account's identifier (your DID) and the tokens your hosting provider gave us. One cookie holds the session's id. The session goes when you log out or when it expires. There are no other cookies.

How the app is used

We record four things, on our own server, to learn what to build next: a poll being viewed, created, voted on, or shared to Bluesky. Each record holds which poll, when, and if you were signed in, your DID. It also notes which site a visitor came from, the browser and operating system family, and any campaign tags on the link. It does not hold your IP address or your full browser signature. Visitors are not given a cookie or an identifier; people on the same network with the same browser are counted together.

These records are deleted after 90 days. Nothing about how you use the app is sent to a third party.

When something breaks

Errors are reported to Honeybadger, which hosts our error tracking. A report carries the request that failed and your session's id, but not your IP address. Our hosting provider's own request logs do record IP addresses, and are kept for as long as the provider keeps them.

Why we are allowed to

Flagrant runs AverageVoter and is the data controller. Under the GDPR our basis for the usage records and error reports is legitimate interest: running the app and finding out whether it works, with as little about you as that takes. Your polls and votes are processed because you asked us to publish them.

Seeing or removing what we hold

Ask, and we will send you the usage records held against your DID, or delete them. Because a DID is the only thing we know you by, the request needs to come from that account: post or message us from it. Write to rave@beflagrant.com.