We ask for as little as we can.
Here is everything this app stores about you, in plain words. It is short because the list is short.
No account, no password and no email address — a first name is optional and you can leave it blank. If you give one, it goes in the list of who has voted, which anyone holding that link can see; what you picked is a different question and the card below answers it. Your browser is given a random token so you can come back to the same vote. We do keep the votes themselves: the options you tapped and the one you vetoed are stored against your entry in that vote, and against your account if you were signed in when you joined.
The email address and username you signed up with, and your password stored as a bcrypt hash — we can't read it back. Plus the sessions you create and the options in them.
These are two different things and only the second is private. Who has voted is not a secret: anyone holding the share link can open the results and read the list, under whatever name each person typed. What they picked is. Results are totals — no screen, no export and no admin page shows who picked what, and there is no code in this app that can work it out, so it isn't a setting somebody could switch on. Being straight with you about the limit: the rows are still in the database, so whoever runs the server could read them with a database query. Anonymous means nobody using the app can see it, not that the information was thrown away.
What you wrote and which face you tapped. Your name and email only if you filled them in, and the address of the screen you were on only while the "include the screen I was on" box stays ticked. If you are signed in when you send it, we also store which account it came from, so an admin knows who to answer. Nothing else — not your browser, not your location.
Two cookies. One keeps you signed in and remembers which vote you are in. The other is written only if you choose "Log in and stay logged in", and it keeps you signed in on this device for 14 days. There is no analytics, no advertising and no tracker of any kind in this app. Pages do fetch two typefaces from Google Fonts, so Google sees that request. The marketfinder.us line in the footer is an ordinary link — nothing loads from it until you tap it.
Send us a note through the feedback form asking us to close your account, and leave an email address so we can write back. Nobody is notified automatically and there is no delete button — a person does it by hand, so give it a few days. Deleting an account also deletes the sessions you organized and frees your email address to be used again. Feedback you already sent is kept, with your name and email on it if you filled them in, but it stops being connected to your account. None of it is sold or shared.
Starting one asks for an email, a username and a password. Voting in someone else's never does.