What we store, and what we refuse to.

The short version

Elegant Polls has no accounts, so there is no profile of you to build. Poll creators are identified only by a secret link. Poll respondents are not identified at all — we do not ask who you are, and the database has no column for it.

What we store

• Poll content. Titles, descriptions, questions, and answer options, exactly as the creator wrote them.
• Responses. The answers respondents submit, including free-text answers, with a submission timestamp. A response is never linked to a name, email address, or account, because none of those exist here.

Poll content and responses are retained while the poll remains active; deletion tooling for creators is planned. Until it ships, treat anything submitted to a poll as retained.

What we deliberately never store

• Respondent names, email addresses, or any account identity.
• Raw IP addresses. Rate limiting (below) works only on one-way hashes.
• Advertising identifiers or cross-site tracking data of any kind.

Cookies

Elegant Polls sets exactly two kinds of cookies, both httpOnly:

• Response cookie. After you submit a response, a per-poll cookie (named ep_r_plus the poll's id) marks that this browser has responded, enforcing one response per browser per poll. It contains no identity — only the value “1” — and expires after about 180 days.
• Management cookie. When a poll creator opens their private link, a per-poll cookie stores their creator key so the dashboard stays accessible from that browser.

There are no analytics cookies and no third-party cookies.

Rate limiting and IP addresses

To keep polls honest and the service available, we limit how many requests a single connection can make. The limiter never stores your IP address. It stores a SHA-256 hash of the address combined with a server-side secret, which cannot be reversed into the address, and every rate-limit record is pruned within 48 hours.

Ads and analytics

Elegant Polls currently runs no advertising and no analytics scripts. If that ever changes, this page will change first.

Who processes the data

The application is hosted on Vercel, and poll data is stored in a Postgres database operated by Supabase. Both act as infrastructure processors under their own security and privacy programs; neither is given respondent identity, because we never collect it.

Contact

A dedicated contact address for privacy questions is being provisioned and will be published on this page as soon as it is live.