Short version: we keep what you give us, use it for the one thing you gave it for, and delete it when you say so.
Restocks
If you sign up, we store your email, which set and location you asked about, and the moment you agreed. We send one email when that set is restocked. Every email has an unsubscribe link; using it stops the emails and marks the sign-up as closed.
Help requests
If you report a problem we store what you told us, the location, your email and your phone number if you gave one. We use them to answer you and to fix the machine, and nothing else.
Votes and posts
Votes use a signed cookie lasting up to one year so you can return and change your picks. Reports also use a random device cookie. We store hashed identifiers, your picks and the location you choose. Short-lived hashes of network addresses help limit repeated submissions; we do not store raw addresses with your ballot. Voting uses background checks for repeated activity; unusual votes may be held for review. Cloudflare Turnstile checks new suggestions for automated abuse. Photos you post are shown publicly once we have looked at them, with the caption and location you chose. Ask us to take one down and we will.
What we do not do
No ads, no advertising trackers and no selling your details. Email is sent through Resend; data is stored with Supabase.
Contact
Questions or deletions: use the help page, or reply to any email we sent.