A little privacy matters.

Personal lists

Names, notes, ratings, finalists, and full-name inputs stay in this browser. Clearing browser storage removes them. JSON exports include your private notes.

Shared lists

Only deliberately shared candidates and room votes are stored by the service. Participants see their own votes and mutual loves. Invitations are single-use. A private recovery link grants access to your side; keep it private. There is no email recovery.

Public polls

Creating a poll deliberately publishes the selected candidate names to anyone with its link. Owners choose whether visitors can see vote totals; otherwise only the signed-in administrator can see results. Private notes and full-name inputs are not shared. Anonymous browser voting is approximate; resetting a browser can create another identity. Polls expire after 30 days. Owners sign in with an admin password to view results, close voting, or delete a poll. We store a salted password hash and an HttpOnly cookie keeps you signed in for up to seven days. An optional recovery email is stored as a poll-specific hash. Support must verify control of that matching mailbox before issuing a password reset. Never email a password. Without a recovery email, support cannot restore access. Turnstile protects public submissions and processes verification information under Cloudflare’s policies.

Removing information

Owners can revoke a partner or delete the shared list. Guests can leave. Provider recovery copies may remain according to hosting retention. We use Google Analytics to understand visits to public pages. Google may use analytics cookies and process browser and device information. Our page-view events exclude query strings, private link fragments, poll IDs, personal lists, and user-entered names or notes. Advertising personalization and Google signals are disabled. See Google’s privacy policy.