Privacy

You don’t need an account and we don’t ask for one. Your browser keeps a random value it made up itself. When you vote, we combine that value with the poll’s id and a secret only our server knows, and store the result as a one-way hash.

That hash exists for one reason: so you aren’t shown the same pair twice. It is different for every poll, so nobody - including us - can tell that the same person voted in two of them. It cannot be turned back into anything about you.

If you type a name, we store it. If you answer “why that one?”, we store that too. Both are shown only to the person who created the poll, and neither is read for any other purpose.

On most polls the name is optional and you can skip it. Some polls ask everyone for a name - if this one does, you’ll be told so on the screen where you type it, before you vote, and the person who made the poll will see your name next to the pairs you judged. They will not see a list of which option you chose each time. If you’d rather not give a name, you can close the page - nothing is recorded until you answer a pair.

We do not track you across sites, build a profile, or use any device fingerprinting. Clear your browser storage and faveoff has no way of knowing you were ever here.

The question you type and the images you upload are stored so people can vote on them. A token is saved to your browser so you can get back to your results; only a hash of it reaches our database.

Photographs have their metadata removed before they are stored - GPS coordinates, camera details and timestamps are stripped, and every image is re-encoded. Images live in private storage and are only ever shown through links that expire within the hour.

If you give us an email address for a sign-in link, we store it so we can send you one.

A poll stops taking votes 30 days after it is created, or sooner if its creator closes it. Thirty days after that, the poll, its votes and its images are deleted outright.

One exception, once paid polls exist: if a creator pays to keep a poll, it is kept for up to twelve months from the day they paid, and everything in it - including any names and reasons people gave - is kept for that long too. If the poll you are voting in does that, the screen that asks for your name says so before you type it.

Images uploaded but never turned into a poll are deleted within a day.

One honest exception, because we would rather say it than let you find out. When a poll link is shared, a small preview picture is made from the question and a couple of the options. We keep our copy for a week at most, and it goes when the poll goes. But WhatsApp, Slack and Facebook each save their own copy the first time a link is pasted - those copies belong to them, and nothing we delete reaches them.

Voting is open to anyone with the link, so we count requests per IP address to stop a script flooding a poll. Those counts live in a temporary store and expire within minutes. Your IP address is never joined to a vote, so it cannot be used to work out who picked what.

Two places do hold one, for ordinary reasons. Our hosting provider keeps request logs, the way every web host does. And if you sign in with an email link, the sign-in record notes the address the request came from - that is how sign-in systems spot someone else trying to get into your account. Neither is read for anything except keeping the service up and safe, and neither is connected to how you voted.

Two things are stored on your device, and neither of them follows you anywhere.

• A poll cookie, set when you create a poll. It is how your results page knows the poll is yours, and it is the only reason you can find it again. Your browser will not let a script read it.
• A voting token, kept in your browser rather than in a cookie. It stops the same device voting on the same pair twice. It is a random value, it is different for every poll, and it is not an identity.

There are no advertising cookies. We do not serve ads, we have no advertising partners, we do not personalise anything, and nothing here follows you to other websites. If you have seen a cookie banner that mentions personalised ads, it is wrong and this page is right.

Supabase holds the database and the images. Vercel runs the site. Upstash holds the short-lived rate limit counters.

Google Analytics counts visits. It runs with consent mode set to deny everything by default, so no analytics cookies are set and your IP address is truncated before it is recorded. Nothing about how you voted is sent to it - it sees pages, not polls.

It stays denied until you say otherwise through the cookie banner. If you don’t see one, nothing has been granted.

PostHog records product usage, also consent-gated and off until granted.

On most polls, votes are deliberately not linked to a person, so we generally cannot find “your” votes to show or delete them - that is the trade for not identifying you. If you created a poll, you can close it at any time, and you can ask us to delete it and everything in it.

If a poll asked you for a name, that is different: we can find your entries by that name. Write to us and we will show you what is stored or delete it.

Why we are allowed to store any of it: the parts that make a poll work - your picks, an option image, a name a poll asked for - we store because you chose to use the tool and it cannot work otherwise, which the law calls a legitimate interest. Analytics, if they are ever switched on, run only with your permission and you can withdraw it.

If you think we have got any of this wrong, please tell us first - but you also have the right to complain to the Information Commissioner’s Office, the UK regulator, at ico.org.uk.

faveoff is run by Digitopia Design Ltd, registered in England and Wales (company number 12037302), 124 City Road, London EC1V 2NX. Email hello@digitopiadesign.com.