Privacy

You don’t need an account and we don’t ask for one. Your browser keeps a random value it made up itself. When you vote, we combine that value with the poll’s id and a secret only our server knows, and store the result as a one-way hash.

That hash exists for one reason: so you aren’t shown the same pair twice. It is different for every poll, so nobody - including us - can tell that the same person voted in two of them. It cannot be turned back into anything about you.

If you type a name, we store it. If you answer “why that one?”, we store that too. Both are optional, both are shown only to the person who created the poll, and neither is read for any other purpose.

We do not track you across sites, build a profile, or use any device fingerprinting. Clear your browser storage and faceoff has no way of knowing you were ever here.

The question you type and the images you upload are stored so people can vote on them. A token is saved to your browser so you can get back to your results; only a hash of it reaches our database.

Photographs have their metadata removed before they are stored - GPS coordinates, camera details and timestamps are stripped, and every image is re-encoded. Images live in private storage and are only ever shown through links that expire within the hour.

If you give us an email address for a sign-in link, we store it so we can send you one.

A poll stops taking votes 30 days after it is created, or sooner if its creator closes it. Thirty days after that, the poll, its votes and its images are deleted outright.

Images uploaded but never turned into a poll are deleted within a day.

Voting is open to anyone with the link, so we count requests per IP address to stop a script flooding a poll. Those counts live in a temporary store and expire within minutes. IP addresses are never written to our database and never joined to a vote.

Supabase holds the database and the images. Vercel runs the site. Upstash holds the short-lived rate limit counters.

Google Analytics counts visits. It runs with consent mode set to deny everything by default, so no analytics cookies are set and your IP address is truncated before it is recorded. Nothing about how you voted is sent to it - it sees pages, not polls.

It stays denied until you say otherwise through the cookie banner. If you don’t see one, nothing has been granted.

PostHog records product usage, also consent-gated and off until granted.

Because votes are deliberately not linked to a person, we generally cannot find “your” votes to show or delete them - that is the trade for not identifying you. If you created a poll, you can close it at any time, and you can ask us to delete it and everything in it.

faceoff is run by Digitopia Design Ltd, registered in England and Wales (company number 12037302), 124 City Road, London EC1V 2NX. Email hello@digitopiadesign.com.