Privacy Policy

What’s stored, and where

Survey completion status and calculated scores are always stored in your browser’s local storage. If you sign in with a verified account (Google, an emailed code, or a phone code), that same completion status and those same calculated scores are also synced to a database we host through Supabase, so your profile is available across your devices. We do not store your raw, question-by-question answers in the cloud — only the aggregated scores computed from them. That holds regardless of whether you sign in: individual answers, which items you were shown, and which figures you recognized never leave your device, except on the invitation pages (below).

There is one more thing in a signed-in account record, and it is the one worth reading closely: the questions you save. Keeping a pairing from the model stores the two traits, your scores on both, what the literature search returned, and any note you wrote against it — and for a signed-in account that record syncs. It is a record, on a server, of a named account taking an interest in a specific political question, which is a different kind of thing from a score. Nothing is saved unless you press save. Each saved question also carries its own switch to keep it on this device and out of the account, set per question rather than as an account-wide setting, because the risk is per question too. Nothing you have not saved is ever there.

Cultural Capital, Media & Taste, Historical Attribution, and Quote Resonance let you choose an Iran track or a General track. That choice is never synced to the cloud, signed in or not — nothing in your account record indicates which track you took.

Most people never sign in at all — the app is fully functional without an account, and nothing about your usage requires one.

Who can access your account data

Cloud-stored profiles are protected by row-level security: the database only permits a signed-in user to read, change, or delete their own record. There is no separate path for browsing other users’ profile data.

Deleting your data

“Reset model”, in the footer inside the app rather than on written pages like this one, clears your local profile immediately. If you’re signed in, your Profile page has a “Delete my account and data” action that immediately and permanently deletes your verified identity (Google link, email, or phone) and your cloud-stored profile — this is self-service, with no wait or email request required, except on the invitation pages (below).

Abuse prevention

To deter automated or duplicate submissions, we may derive a one-way hash from your IP address and store it, on its own, with no link to your survey answers, scores, or account. These hashes are automatically purged after 90 days and are never exported alongside or joined with response data.

Hosting and jurisdiction

This application and its database run on infrastructure based in the United States (Vercel and Supabase). We are not currently able to commit to a data-protection standard stronger than what US law requires, or to resisting a legally valid US data request. If your situation carries real risk from that, weigh it before creating an account or entering anything you would not want disclosed under US legal process — the survey itself works fully without an account.

Information collected by hosting providers

Our hosting, domain, and authentication providers may process standard technical information such as IP address, browser type, request time, and security logs. Their processing is governed by their own terms and privacy policies.

Sensitive information

Political and psychological responses can be sensitive. Do not use the current prototype for clinical decisions, employment screening, eligibility decisions, or high-stakes profiling.

Analytics and research

This version of the application does not run third-party analytics and does not use your responses for research, except on the invitation pages (below). If that changes, this policy and the consent process will be updated before collection begins, and any published aggregate statistic will suppress breakdowns smaller than 20 respondents.

The invitation pages

If you review the Iran banks through the invitation at invite.projectunaligned.com/iran-track, the site keeps what you give there: the name in the name box (the one you write, or the one the link you were sent filled in for you, which you can change), your answers to the reader’s questions on each item, your answers to the four questions, keep or drop, and any words you add, together with a random id for your browser and the time. That is all. No account, no address, no cookie; nothing here links to a battery record. The project reads these rows to judge the banks and for nothing else. To have your rows removed, write to privacy@projectunaligned.com with the name you used.

Contact

Privacy inquiries: privacy@projectunaligned.com