Privacy Policy.

This policy explains how OpinionBase (“we”, “us”) handles personal information when you use the website, app, and related services.

We hold only what we need to run the service:

a. Account & identity

• The identifier and profile fields your social provider shares when you log in — typically a unique ID, an email address, a display name, and an avatar URL (Google, Apple, GitHub, X, or similar).
• Your OpinionBase handle, display name, bio, and avatar (as you set them in Settings).

b. Things you create

• Questions, options, descriptions, cover images, tags, and categories you post.
• Votes, confidence levels, predictions, comments, reactions, bookmarks, follows, and the derived signals (streaks, titles, tallies, trust score).

c. Technical & usage data

• IP address, rough geographic region derived from it, user-agent string, device & browser info, referrer.
• Basic request logs, error traces, and performance metrics used to keep the site up and detect abuse.
• Cookies / localStorage items that remember your session, your theme preference, and keep you signed in.

d. What we don't collect

We don't ask for your phone number, your real name, your location beyond a coarse region, your contacts, or any sensitive category of personal data (health, religion, sexual orientation, political affiliation) unless you choose to type it into a question or comment yourself.

We use the information above to:

• Run the core product — show you questions, count your votes, let you comment.
• Identify you to other users via your handle and avatar.
• Send transactional notifications tied to your activity.
• Keep the platform safe — detect bot-voting, brigading, spam, harassment, account takeover.
• Improve the product — aggregate, anonymised usage signals.
• Derive aggregate and statistical insights — vote distributions, perception trends, demographic breakdowns, topic-level sentiment — that we may license to commercial partners. See “Data products & commercial partners” below.
• Comply with law, respond to legal requests, and protect our rights.

We do not use your personal information for targeted advertising on OpinionBase and we do not sell data that identifies you as an individual. Aggregated, anonymised insight products are a separate matter — see the section below.

Lawful bases (for EEA / UK users)

If you're in the EEA or UK, here's the legal basis we rely on for each category of processing under Articles 6 and 9 of the GDPR / UK GDPR:

• Creating your account, authenticating you, and delivering the core product (showing questions, recording your votes and comments, sending transactional notifications) — necessary for the performance of our contract with you (Art. 6(1)(b)).
• Keeping the platform safe — abuse detection, bot defence, rate-limiting, account security, logging — our legitimate interest in running a functioning, non-hostile service (Art. 6(1)(f)).
• Product improvement and aggregate insight productslicensed to commercial partners — our legitimate interest in sustaining and funding the service (Art. 6(1)(f)). You have an absolute right to object to this processing: see “Your rights” below, or opt out directly at /do-not-sell.
• Special-category data — OpinionBase hosts questions on politically, religiously, medically, or otherwise sensitive topics (Art. 9 categories). When you cast a mark on one of those questions, that choice reveals information that falls within Art. 9. We process it only because you have given explicit consent at sign-up (Art. 9(2)(a)), and only in aggregate, anonymised form for insight products. We do not build individual profiles of your political, religious, or health views, and we do not sell those profiles. You can withdraw this consent at any time by deleting your account or by emailing helpopinionbase@gmail.com; withdrawal does not affect the lawfulness of processing done before withdrawal.
• Complying with law — responding to lawful requests, tax and accounting records, enforcement of our Terms — required to comply with a legal obligation, or our legitimate interest in establishing, exercising, or defending legal claims (Art. 6(1)(c) and (f)).

Where we rely on legitimate interests, we've performed a balancing test and believe your fundamental rights are not overridden. We're happy to walk through that balancing test on request.

Questions, options, descriptions, comments, reactions, vote counts, tags, profile handle, display name, avatar, bio, and streaks are public. They're indexed, searchable, and visible to anyone who visits the URL — including search engines and AI training crawlers unless we block them at a protocol level.

Private to you (visible only to your own account and our operators for moderation): your email, your individual vote choice on a given question (we show only aggregate tallies), your confidence level on a given vote, your bookmarks, your notifications, and moderation history. Please don't post anything in public content that you wouldn't want to be part of the permanent record.

We use a small number of cookies and localStorage keys:

• Session cookies set by our authentication provider (Supabase) to keep you signed in.
• A theme preference (light / dark) stored locally so the site remembers it next visit.
• Small UI state (dismissed tips, seen-combo counters) stored locally in your browser.

We do not use third-party advertising cookies. You can clear cookies and localStorage from your browser at any time — you will be logged out and the site will reset preferences.

We run OpinionBase on top of a small set of infrastructure vendors. They process your personal information only to perform services for us and are bound by their own privacy commitments:

• Supabase — database, realtime, authentication, file storage.
• Vercel — web hosting, edge routing, static assets.
• Social identity providers — Google, Apple, GitHub, X (Twitter), and any others we enable. When you sign in through them, they share a minimum set of profile fields with us. Their privacy policies apply to their side of the transaction.

Be clear on this up front: OpinionBase is the data controller for the aggregate opinion and perception data generated on the platform. That includes how many people voted for each option, confidence levels, prediction accuracy, how tallies move over time, and how those numbers break down across demographic and contextual signals (for example: coarse country / region, device type, language, sign-in provider, vote-activity cohort, time of day, topic or tag). We hold the rights to aggregate, anonymise, annotate, model, and commercialise this data.

We may, and do, share or license these aggregated and anonymised insight products to third-party partners — for example:

• Brands and market-research firms measuring public sentiment.
• Academic and non-profit researchers studying social attitudes.
• Media organisations citing public-opinion trends.
• Dataset marketplaces that redistribute anonymised panels.

What partners do not receive from us:

• Your email address.
• Your social-provider ID or any other direct identifier.
• Your individual vote rows in a re-identifiable form. Tallies are shared as group-level counts with a minimum cohort size enforced before any breakdown is released.
• Your private bookmarks, notifications, or moderation history.

Where required by law we'll disclose the categories of data shared, the purposes, and our legal basis, and honour your right to object (see “Your rights”). You can also stop contributing at any time by not casting marks, or by deleting your account — at which point we'll stop including new signal from you in future data products. Historical aggregates already delivered to partners cannot be recalled.

California residents: under the CCPA / CPRA you have a specific right to opt out of the “sale” or “sharing” of personal information. Exercise it at /do-not-sell. We will not retaliate against you or degrade your service for exercising that right.

We use HTTPS for all traffic. Authentication tokens are stored in secure, HTTP-only cookies. Row-Level Security policies in our database ensure you can only read and modify your own private data. Passwords are never stored on our servers — we rely on social sign-in. We try to keep things tight, but no system is perfectly secure; you use the service at your own risk.

Your profile and public content persist until you delete them or delete your account. Technical logs roll off on a short retention window (typically 30–90 days) unless we need to keep them longer for a specific security incident. Aggregated, anonymised metrics may be retained indefinitely.

Depending on where you live, you may have the right to:

• Access the personal information we hold about you.
• Correct inaccurate information.
• Delete your account and most associated personal data.
• Export a copy of your content.
• Object to or restrict certain processing.
• Ask us to exclude your future activity from the aggregate insight products we license to partners.
• Withdraw consent where processing is based on consent.
• Lodge a complaint with your local data-protection authority.

You can exercise the first four from Settings. For anything else, email helpopinionbase@gmail.com. We'll reply within 30 days.

Our infrastructure providers operate servers in multiple countries. By using OpinionBase you accept that your information may be transferred to and processed in jurisdictions with different data-protection laws than your own.

OpinionBase is not intended for children under 13 (or the minimum digital-consent age in your country, whichever is higher). If you believe we have collected information from a child, please email helpopinionbase@gmail.com and we'll delete it.

We'll update this policy when the product changes in a way that affects your privacy. The effective date at the top always shows the current version. Material changes will be announced in-app or by email.

Write to helpopinionbase@gmail.com for anything privacy-related. For the rules governing use of the platform, see our Terms of Service.