Privacy Notice
Last updated 25 August 2026 · Pubperch Ltd (United Kingdom)
We try to collect as little as possible. Voting is anonymous and needs no account. We do not track you across other websites, and we do not use invasive fingerprinting.
If you vote
You do not need an account, and we do not learn who you are. We do collect:
- A random identifier stored in a first-party cookie. It is a random value with no meaning outside this site. It exists so the same person cannot vote twice in one match.
- A one-way fingerprint of your network address. We never store your IP address itself — we store an HMAC of it, computed with a secret key, so it can be compared against other votes but not read back or reversed into an address.
- Your country, as reported by our CDN, and basic timing information used to detect automated voting.
Founders never see any of this. They see aggregate counts only — never who voted, never any network identifier.
If you submit a product
We store the account and product details you give us: email address, display name, optional social handles, and everything you enter about your product. Sign-in uses either a link or code sent by email, or GitHub or X if you choose those.
How long we keep things
These are the periods we actually enforce, not aspirations:
| Data | Retention |
|---|---|
| Server access and operational logs | 7 days |
| Network fingerprints attached to a vote | 30 days, then permanently erased from the vote record |
| Anonymous voter identifier on a vote | Kept for the life of the tournament record — it is what proves one vote per person, and is therefore part of the result |
| Rally sessions and product impressions | 90 days in detail, then daily totals only |
| Vote risk assessments | 90 days |
| Administrator action log | 7 years |
| Verification tokens | Never stored beyond the moment of checking |
Who we share it with
We use a small number of processors and nothing else:
- Cloudflare — CDN, security and human verification
- Hetzner (Finland) — hosting
- Cloudflare R2 (Western Europe) — image storage
- Resend (EU) — transactional email
- Stripe — payments, if you buy something. We never see your card details.
We do not sell personal data, and we do not use it for advertising.
Your rights
Under UK and EU data protection law you can ask for a copy of your data, ask us to correct or delete it, or object to how we use it. Email [email protected] and we will respond within one month.
Anonymous voting data is a limit here rather than a refusal: because we never learn who you are, we usually cannot identify your votes in order to act on them. Deleting your cookie removes the only link.
You can also complain to the UK Information Commissioner’s Office at ico.org.uk.
Legal basis
- Legitimate interests — running a fair competition and preventing vote manipulation. Without the anti-abuse data the competition has no integrity.
- Contract — operating your account and any purchase you make.