Only what’s needed to make the decision work.

What a decision contains

The question, its choices, a random public link identifier, anonymous voter identifiers, timestamps, lifecycle settings such as a deadline, and the selected option needed to calculate vote totals.

One active vote per browser

PickTogether creates a random anonymous identifier in this browser and stores it locally. That identifier is sent with poll requests so the database can recognize this browser’s existing choice and update a vote instead of adding a duplicate. It is not intended to identify a person.

Creator controls stay private

For new decisions, PickTogether creates a random owner key and keeps it in the creator’s browser. The application database stores only a one-way SHA-256 hash of that key. The creator can explicitly copy the raw key as a private backup and restore it on another browser; it is never added to the shared decision URL and is not intentionally written to application logs.

Shared links are access, not secrecy

Anyone who obtains a decision link may be able to open it and can forward or reshare that link. Real poll pages use noindex and nofollow to reduce search exposure, but those directives do not authenticate viewers or control access. Avoid putting sensitive or personal information in questions or choices.

What we do not store in the app database

PickTogether does not store names, email addresses, phone numbers, account profiles, advertising identifiers, device fingerprints, or IP addresses in its application database.

Service safety

Cloudflare may process standard network and request metadata to deliver and protect the service. PickTogether also applies coarse platform-level rate limits to poll creation and updates without adding IP addresses or device fingerprints to the application database. PickTogether keeps application error logs limited to technical failure context and does not intentionally log decision text or anonymous voter identifiers. It also does not intentionally log raw owner keys.

Advertising and third-party technologies

The current application does not load analytics scripts or active ad-rendering components in its UI. Publisher-controlled public pages may use advertising services such as Google AdSense or Adsterra if they are enabled later. Advertising providers and their partners may then use cookies, web beacons, IP addresses, browser or device information, and similar identifiers to deliver, measure, limit, secure, or personalize advertising according to their own policies and the choices available to you. PickTogether does not add those advertising identifiers to its application database.

How Google uses data on partner sites · Adsterra privacy policy