Privacy
Last updated 31 August 2026
What we collect
A session
The first time you cast a ballot, or the moment you open an account, we create an
account for you without asking you anything. It is a random identifier and nothing
else: no name, no email, no device details. It sits in your browser under
referendum.session.
Your ballot
The side you voted for, the winner you called, the day, and the streak bonus that applied when you voted. That is the game. Your individual ballot is readable by you and by nobody else, including other players.
A country, as two letters
Our host works out a country code from your IP address at the moment of the request. We never see or store the IP address itself, only the two letters. The code appears on the site in aggregate only, and only for countries with at least fifty ballots on a question, so a single ballot can never be traced back to one person.
An email address, only if you give one
Signing in with a magic link, or with Google, attaches an address to your account so your streak survives a lost or wiped phone. Skip it and everything still works, minus that safety net.
A name, only if you claim one
A claimed name is public by design: it appears on the boards next to your streak, your points and your seals. Until you claim one, you are on no board at all.
What we do not collect
No advertising trackers, no fingerprinting, no precise location, no contacts, no browsing history. Our host counts page views for us without cookies or identifiers: it tells us how many people came, never who they are. The site sets no cookies: the two things it keeps are your session and the question of the day, both in your browser's local storage, and you can clear them at any time from your browser settings.
Where it is held
- Supabase holds the database and the accounts, on servers in Frankfurt, Germany.
- Vercel serves the page and resolves the country code at the edge.
- Google is involved only if you choose to sign in with Google, and only to confirm that you are you.
We do not sell your data. We do not share it with anyone beyond the three above, each of which only handles what it needs to run the site.
How long we keep it
- Ballots, points, streaks and seals stay for as long as your account exists.
- An anonymous account with no email is unreachable for us and disappears with your browser storage. If you clear it, that account is gone and so is its streak.
- Accounts that were opened but never used to vote are deleted after two days. Anonymous accounts with no name, no points and no league are deleted after six months without a ballot. An account that is still playing is never touched.
- You can delete your account yourself at any time, from the account panel. It goes immediately, with everything attached to it.
Why we are allowed to
Running the game is a contract between you and us: we cannot count a ballot without recording it. Your email, when you give one, rests on that same footing, since its whole purpose is to keep your account reachable. Nothing here is used for advertising or profiling.
Your rights
Under the GDPR you can ask for a copy of your data, correct it, delete it, take it elsewhere, or object to how it is handled. Write to contact@lunyx.dev and we answer within one month. If you think we have handled it badly, you can complain to the CNIL.
Children
The Referendum is not meant for children under 13, and we do not knowingly keep an account for one. Tell us if that happened and we remove it.
Changes
If this page changes in a way that matters, the date at the top changes with it and we say so on the site.
Who we are
The Referendum is published by Lunyx, a sole trader registered in France.
Publication director: Guillaume Bonnin
SIRET 108 756 222 00015
59 rue de Ponthieu, Bureau 326, 75008 Paris, France
Contact: contact@lunyx.dev
The site is hosted by Vercel Inc., 440 N Barranca Ave PMB 4133, Covina, CA 91723-1722, United States, +1 415 398 5463. Its data is held by Supabase on servers in Frankfurt, Germany.