Privacy policy

This policy explains how VOTEPOT.lol collects, uses, and shares personal information when you browse the board, upload content, create a battle, purchase votes, or contact us. The operator identified in the Contact section below is responsible for VOTEPOT’s use of this information.

Browsing does not require an account. That does not make every visit anonymous: a browser identifier connects activity and unfinished submissions, and a completed purchase connects payment information to the relevant vote or battle. Paddle handles its checkout information under its own privacy notice.

• Information you submit. Side names, battle questions, categories, emojis, optional links, uploaded images, and the side and vote quantity you select. Uploads also have associated file information, such as file type, size, and upload date.
• Browser and activity information. A randomly generated browser identifier, the date it was first seen, and a record of recent activity used to estimate online browsers. The identifier also connects your drafts, uploads, and pending votes to the browser that created them.
• Information from Paddle. Checkout and transaction references, payment and refund status, the paid amount, and confirmation information. After a completed payment, we receive the payer’s email address and associate it with the vote. For a starting vote, it is also associated with the battle and its uploaded images.
• Support correspondence. Your contact details and the information you send when asking for assistance, reporting content, or making a privacy request.
• Connection and diagnostic information. Our hosting and service providers may receive IP addresses, browser information, request times, and requested URLs while delivering and protecting the service. The application also records limited error information to investigate failures.

You do not need to give VOTEPOT an email address to prepare a draft. Payment and billing details are entered into Paddle’s checkout. VOTEPOT does not receive or store your full card number or card security code. The payer email and verified payment information are needed to complete and support a purchase.

• Provide the service: save submissions, process uploads, connect purchases to the correct side, publish battles, and update vote totals after confirmed payments and full refunds.
• Maintain the board: show public comparisons and activity, estimate online browsers, and count browser visits without counting the same identifier repeatedly.
• Support and protect participation: respond to requests, investigate errors or abuse, verify requests about purchases or content, and resolve disputes.
• Meet legal obligations: retain necessary transaction information and respond to valid legal requests.

Where a legal basis is required, we rely on performing a contract or taking steps you request before a contract for submissions and purchases; legitimate interests for security, support, dispute handling, and basic service measurement where permitted; and legal obligations for required recordkeeping and disclosures. Our interests are operating a reliable service, preventing misuse, and understanding its use.

We do not sell personal information or use it for targeted advertising. We do not use personal information to make solely automated decisions with legal or similarly significant effects on you. Paddle may carry out its own payment and fraud checks, as described in its privacy notice.

A published battle’s question, category, side names, images, emojis, links, and aggregate vote counts are public. Recent activity may also show an individual confirmed purchase’s vote quantity, its value, the side supported, and when it was confirmed, without the payer’s email address. Public content can be viewed, copied, or indexed by others.

We do not publish payer email addresses, browser identifiers, or payment references on the board. This does not guarantee that someone cannot infer who participated from information they already have or from details included in a submission.

Draft battles are not listed publicly. Images upload as soon as you select them and are accessible to anyone with their public URL, including before publication. Canceling a form or replacing an image does not immediately erase the upload. Do not upload confidential material or include private information in a name, question, image, or link.

VOTEPOT uses a first-party cookie called votepot_visitor, with a lifetime of up to 30 days. It contains a signed random identifier, not your email address or payment details. It lets the service recognize the browser associated with unfinished submissions and also supports online and total-visitor counts.

While the board is active, it sends periodic activity updates. A browser stops counting as online after approximately 90 seconds without an update. Online and visitor figures count browser identifiers, not verified people; different browsers or cleared cookies can cause the same person to be counted again.

You can clear or block cookies through your browser settings. Doing so can prevent access to drafts and checkout preparation. It does not delete information already stored by VOTEPOT. The board does not use advertising cookies. Paddle may use its own cookies and similar technologies when its payment tools load; its privacy notice explains those practices.

• Paddle handles checkout, billing, payment verification, and refunds. We send identifiers for the purchase, battle, side, and browser session, together with the vote quantity, price, and currency, to match its confirmation to your purchase. Paddle is separately responsible for its use of checkout data under the Paddle Privacy Notice.
• Supabase hosts application records, including battle, vote, browser, and payment-reference information. Its Data Processing Addendum describes its handling of customer data.
• Cloudflare R2 stores and serves uploaded images. Hosting and delivery providers also process the connection information needed to serve and secure the website. See the Cloudflare Privacy Policy.

We may also disclose relevant information when necessary to comply with a valid legal obligation, establish or defend legal claims, or address fraud, abuse, or threats to people’s safety.

When you preview a link or view a side that uses a website icon, your browser requests that icon from getfavicon.dev, with Google’s favicon service as a fallback. These services receive the website’s hostname and connection information such as your IP address. We send the hostname, rather than the submitted link’s full path or query string, to request the icon.

Google’s use of information is described in its Privacy Policy. If you open a side’s external link, you visit a separate website governed by its own privacy practices. Review the destination before sharing information there.

Our service providers may store or process information outside your country of residence. Their published data-processing terms describe the transfer mechanisms they use. Protections and legal requirements depend on the countries and services involved. You can contact us for information about the processing locations and safeguards applicable to your information.

• Unpaid drafts and unused uploads: eligible records may be removed once they are at least one hour old. This includes images left behind by canceled forms or replaced selections. Removal depends on a successful cleanup run and may be delayed while a payment’s status is being resolved.
• Published battles and associated images: retained to display the comparison and maintain its results, subject to content removal, privacy requests, and legal needs.
• Vote, payment, and support records: retained to reconcile transactions, investigate problems, resolve disputes, and meet applicable recordkeeping obligations.
• Visitor identifiers: retained with their first-seen dates to avoid counting the same browser identifier repeatedly. Short-lived online entries expire separately and are eligible for cleanup.

Published content, payment records, and visitor identifiers do not currently have a fixed automatic deletion period. These records can remain stored for the purposes above, subject to applicable requests and legal requirements. Cookie expiry, a refund, or closing a page does not by itself delete those records.

Deletion from the active service may not immediately remove copies in provider backups or caches. Copies made independently by other people or websites are outside our control.

We use access checks for unfinished submissions, verification of payment notifications, and separation of public content from payment details to help protect information. No online service can guarantee absolute security. Avoid sharing a browser session on an untrusted device, and never send card numbers, security codes, or passwords in a support request.

Depending on the law that applies to you, you may ask to access, correct, or delete personal information, obtain a portable copy, or restrict its use. Where processing relies on consent, you may withdraw it without affecting processing that was lawful before withdrawal.

Right to object. Where applicable law provides this right, you can object to processing based on legitimate interests, including service measurement, for reasons related to your circumstances. Contact us to make that request.

Use the contact details below and identify the relevant purchase, battle, or information. We may ask for proportionate evidence to verify your connection to it before disclosing or changing records. We will handle requests within the time required by applicable law and explain any limits, including information that must be retained for legal obligations or disputes.

Requests about Paddle’s own billing or checkout records can also be made directly to Paddle using its privacy notice. You may complain to the data-protection authority responsible for your location where that right applies.

Purchasing votes or publishing a battle requires the legal capacity described in our terms. Do not submit a child’s private information. If you believe a child’s information has been shared or a purchase was made without appropriate authority, contact us with the relevant details so we can review the situation.

We will update this policy when our practices change. Where required, we will provide additional notice and obtain consent before introducing a new use of personal information that requires it.

Last updated: 11 September 2026.

For service questions, content reports, or privacy requests, email contact@votepot.lol. Include the relevant battle or transaction reference. Never send a full card number or security code.

For a Paddle purchase, you can also contact Paddle buyer support with the email and transaction reference from your receipt.