Skip to content

Privacy Policy

Last updated: [DATE]

This policy explains what personal data vomatt collects, why, and the choices you have. [COMPANY NAME] is the data controller.

1. What we collect

You give us

  • Email address — to sign you in with a one-time code and to contact you about your account.
  • Profile — username, display name, bio and optional avatar. These are public.
  • Activity — polls you create, votes you cast, comments you write, and members you follow.

Collected automatically

  • Sign-in cookies that keep you signed in (see the Cookies Policy).
  • Language preference, detected from your browser and stored in a cookie.
  • Technical data such as IP address, browser type and request logs, kept by our hosting provider for security and troubleshooting.
  • Usage analytics, if enabled: pages visited and general device information, through Google Analytics.

2. How we use it

  • Run your account and the Service (sign-in, polls, votes, comments, notifications).
  • Keep the platform fair and safe: one vote per member, preventing abuse and fake accounts.
  • Understand how vomatt is used and improve it.
  • Meet legal obligations.

Legal bases (where GDPR applies): performing our contract with you; our legitimate interests in security and improving the Service; your consent for analytics; and legal obligations.

3. What others can see

  • Your username, display name, bio, avatar, public polls and comments.
  • Votes: the poll creator chooses whether voters are visible to everyone, to limited people, or to nobody. You see this before voting. Counts are hidden until the poll closes.
  • People you follow and who follow you, as shown on profiles.

4. Who we share it with

We don't sell your personal data. We share it only with providers who help run vomatt, under contract:

  • Vercel — website hosting.
  • [API / DATABASE HOST] — application data storage.
  • Email delivery provider [NAME] — sending sign-in codes.
  • Sanity — site content (no member data).
  • Google — analytics, if enabled.

We may also disclose data if the law requires it or to protect people's safety.

Some providers process data outside your country (for example in the United States). Where required, we use safeguards such as Standard Contractual Clauses.

5. How long we keep it

  • Account and profile data: until you delete your account.
  • Votes and comments: until you delete them or your account. Vote totals on closed polls stay, without your identity.
  • Sign-in sessions: up to 30 days of inactivity.
  • Server logs: [30] days.

6. Your rights

Depending on where you live (including under GDPR and Taiwan's Personal Data Protection Act), you can ask to access, correct, delete, or export your data, object to or restrict processing, and withdraw consent at any time. You can edit your profile and delete your account in Account settings, or email [PRIVACY EMAIL]. You can also complain to your local data protection authority.

7. Security

Sign-in tokens are stored in secure, httpOnly cookies and sent only over HTTPS. No system is perfectly secure, so please keep your email account safe.

8. Children

vomatt is not for children under [16]. If we learn a child has an account, we will delete it.

9. Changes

We'll post updates here and tell you about significant changes.

10. Contact

[COMPANY NAME], [ADDRESS] — [PRIVACY EMAIL]

Privacy Policy | Vomatt