A little privacy matters.

Personal lists

Names, notes, ratings, finalists, and full-name inputs stay in this browser. Clearing browser storage removes them. JSON exports include your private notes.

Shared lists

Only deliberately shared candidates and room votes are stored by the service. Participants see their own votes and mutual loves. Invitations are single-use. A private recovery link grants access to your side; keep it private. There is no email recovery.

Public polls

Creating a poll deliberately publishes the selected candidate names to anyone with its link. Owners choose whether visitors can see vote totals; otherwise only the signed-in administrator can see results. Private notes and full-name inputs are not shared. Anonymous browser voting is approximate; resetting a browser can create another identity. Polls expire after 30 days. Owners sign in with an admin password to view results, close voting, or delete a poll. We store a salted password hash and an HttpOnly cookie keeps you signed in for up to seven days. An optional recovery email is stored as a poll-specific hash. Support must verify control of that matching mailbox before issuing a password reset. Never email a password. Without a recovery email, support cannot restore access. Turnstile protects public submissions and processes verification information under Cloudflare’s policies.

Removing information

Owners can revoke a partner or delete the shared list. Guests can leave. Provider recovery copies may remain according to hosting retention. The site contains no analytics or advertising trackers.