Privacy

Last updated 15 September 2026

What we collect

A session

The first time you cast a ballot, or the moment you open an account, we create an account for you without asking you anything. It is a random identifier and nothing else: no name, no email, no device details. It sits in your browser under referendum.session.

Your ballot

The side you voted for, the winner you called, the day, and the streak bonus that applied when you voted. That is the game. Your individual ballot is readable by you and by nobody else, including other players.

Your Platinum Ball ballot

The ten names you ranked, in that order. It is kept against your account and not against your browser, so it follows you to another phone. Nobody else can read it, and the site only ever shows how many ballots have been cast, never what is inside them.

A country, as two letters

Our host works out a country code from your IP address at the moment of the request. We never see or store the IP address itself, only the two letters. The code appears on the site in aggregate only, and only for countries with at least fifty ballots on a question, so a single ballot can never be traced back to one person.

An email address, only if you give one

Signing in with a magic link, or with Google, attaches an address to your account so your streak survives a lost or wiped phone. Skip it and everything still works, minus that safety net.

A name, only if you claim one

A claimed name is public by design: it appears on the boards next to your streak, your points and your seals. Until you claim one, you are on no board at all.

What we do not collect

No advertising trackers, no fingerprinting, no precise location, no contacts, no browsing history. Our host counts page views for us without cookies or identifiers: it tells us how many people came, never who they are.

The site sets one cookie, and one only: referendum_session, on thereferendum.vote and its subdomains. It holds the keys to your own session and nothing else, so that a single account works both on the referendum and on the Platinum Ball, which live at two different addresses. It is what keeps you signed in, which is why it needs no consent banner, and it says nothing about you to anyone. The rest, your session and the question of the day, stays in your browser's local storage. You can clear all of it at any time from your browser settings.

Where it is held

• Supabase holds the database and the accounts, on servers in Frankfurt, Germany.
• Vercel serves the page and resolves the country code at the edge.
• Google is involved only if you choose to sign in with Google, and only to confirm that you are you.
• Stripe handles payment, and only when you pay: a streak repair, or a sponsored day. Your card and your billing details go to Stripe and never reach us. Stripe receives a payment, never a ballot.

We do not sell your data. We do not share it with anyone beyond the four above, each of which only handles what it needs to run the site.

How long we keep it

• Ballots, points, streaks and seals stay for as long as your account exists.
• An anonymous account with no email is unreachable for us and disappears with your browser storage. If you clear it, that account is gone and so is its streak.
• Accounts that were opened but never used to vote are deleted after two days. Anonymous accounts with no name, no points and no league are deleted after six months without a ballot. An account that is still playing is never touched.
• Once your account is secured with an email address or a Google sign-in, you can delete it yourself from the account panel. It goes immediately, with everything attached to it. An anonymous account carries no such button, since nothing proves whose it is: clearing your browser puts it beyond your reach, and the clean-up above removes it from ours.

Why we are allowed to

Running the game is a contract between you and us: we cannot count a ballot without recording it. Your email, when you give one, rests on that same footing, since its whole purpose is to keep your account reachable. Nothing here is used for advertising or profiling.

Your rights

Under the GDPR you can ask for a copy of your data, correct it, delete it, take it elsewhere, or object to how it is handled. Write to contact@lunyx.dev and we answer within one month. If you think we have handled it badly, you can complain to the CNIL.

Children

The Referendum is not meant for children under 13, and we do not knowingly keep an account for one. Tell us if that happened and we remove it.

Changes

If this page changes in a way that matters, the date at the top changes with it and we say so on the site.

Who we are

The Referendum is published by Lunyx, a sole trader registered in France.
Publication director: Guillaume Bonnin
SIRET 108 756 222 00015
59 rue de Ponthieu, Bureau 326, 75008 Paris, France
Contact: contact@lunyx.dev

The site is hosted by Vercel Inc., 440 N Barranca Ave PMB 4133, Covina, CA 91723-1722, United States, +1 415 398 5463. Its data is held by Supabase on servers in Frankfurt, Germany.