Privacy
Reading VoteVera needs no account and sets no cookies. Signing in collects only what is needed to post.
Reading the site
No account, no cookies, no trackers, no advertising and no third-party analytics. Our host, Cloudflare, keeps aggregate, cookieless traffic counts.
If you sign in
- Email address. Used only to send your one-time sign-in code. Never shown, never shared, never used for newsletters. Codes are stored only as a one-way hash and expire after 10 minutes.
- Display name. Shown next to what you post.
- What you post. Agreements, challenges, evidence links and notes are public and included in our open data export, with your display name.
- A session cookie. One essential cookie keeps you signed in. It is HttpOnly and Secure, and nothing else reads it.
- Abuse limits. To limit abuse we keep one-way hashes of your IP address and email address with sign-in and posting attempts for up to one day. Temporary and disposable email addresses cannot sign in.
- Bot check. Signing in and posting use Cloudflare Turnstile, which checks that a person is using the page, usually without a puzzle and without advertising cookies.
Who handles it
The site, its database and the bot check (Turnstile) run on Cloudflare. Sign-in emails are sent by Resend. Neither receives anything beyond what is listed above.
Deleting your account
Email [email protected] from the address you signed in with. We delete your email address and display name; your public posts stay in the record, attributed to "deleted account", because other people's rulings may depend on them.