Privacy

What we store

• Polls: the question, the options, the settings, when the poll was made (and when voting closed, if it has), and the IP address it was made from, so we can deal with abuse.
• Votes: your choices and when you voted, plus your name if the poll asks for one. We don't store IP addresses with votes.
• Surveys: the questions and the survey's intro, and each person's answers, including anything typed into a question, plus their name if the survey asks for one. As with votes, no IP addresses.
• Email addresses, only if you give one: to look after a poll you made, or to add a poll you voted in to My polls. Making a survey whose answers only you can see needs one; for every other poll it's optional. An address is only saved once you click the link we send to it.
• Emailed links: the address and the IP address that asked for the link, so no one can flood an inbox. These records are deleted a few days after the link expires.
• Messages to us: what you write in the contact form or a poll report, your email address if you give one so we can reply, and the IP address it came from, so no one can flood us. They're also emailed to the TallyLab team. We delete them from the site after 180 days.
• Server logs: like most websites, the server logs requests (IP address, page and browser type) to fix problems and stop abuse.

Cookies

No advertising or analytics cookies. TallyLab uses cookies only to work:

• A random ID, so each browser gets one vote per poll and can change it (kept for a year).
• Your sign-in to My polls, if you sign in (30 days).
• For polls you made, a key that lets you manage them, such as closing voting, choosing a scheduling poll's final time or seeing a survey's answers (a year).
• Short notes like "Thanks, your vote is in", which expire after a minute.
• While you save a survey's answers to Google Drive, a note that brings you back to the right survey (10 minutes).

Your browser also remembers the last name you typed, to fill it in next time. That stays in your browser and is only sent when you vote.

Who can see what

• Anyone with a poll's link can see the poll and its results. If a poll asks for names, the results show who voted, but not how each person voted. Scheduling polls are different: everyone can see which times each person can make.
• Surveys are private to the person who made them, unless they choose to share the answers. Only they (or anyone they give the survey's Manage link to) can see the answers, with each person's name if the survey asks for names. Everyone else sees only their own answers.
• Surveys that share their answers, such as "Get to know each other", show everyone's answers, with names if the survey asks for them, to each person once they've answered. Anyone with the link can answer, so anyone with the link can see them. The survey says so before you answer.
• Email addresses never appear on any page. Organizers can't see voters' addresses, and voters can't see the organizer's.
• The TallyLab team can see everything stored, and uses it only to run the site and deal with abuse.

Other services

• Amazon Web Services hosts the server and the database.
• Resend sends our emails, so it sees the address and the message.
• Google, only if you made a survey and choose "Save to Google Sheets" or "Save to Google Docs": the answers go into a new file in your own Google Drive. Google asks you first. TallyLab can only create that file, can't see anything else in your Drive, and doesn't keep the access afterwards.
• Sentry receives a report when something breaks on our server. We remove names, email addresses, IP addresses, cookies and private links before reports are sent.

That's all. Every script, font and image comes from tallylab.org itself, so no other company sees your visit from your browser.

Changing or deleting your data

• You can change your vote or your survey answers at any time by sending them again from the same browser.
• In My polls, you can delete polls you made (for good, with every vote), and take polls you voted in off your list, which removes your email from that vote.
• Deleted polls stay in our private backups for up to 30 days, then they're gone.
• For anything else, such as removing a vote or a name, contact us.

Children

TallyLab is for people 13 and older, and we don't knowingly keep email addresses from children under 13. If you think your child has given us theirs, contact us and we'll delete it, along with their name on the polls where they used it.