Privacy Policy

What’s stored, and where

Survey completion status and calculated scores are always stored in your browser’s local storage. If you sign in with a verified account (Google, an emailed code, or a phone code), that same completion status and those same calculated scores are also synced to a database we host through Supabase, so your profile is available across your devices. We do not store your raw, question-by-question answers in the cloud — only the aggregated scores computed from them. That holds regardless of whether you sign in: individual answers, which items you were shown, and which figures you recognized never leave your device.

There is one more thing in a signed-in account record, and it is the one worth reading closely: the questions you save. Keeping a pairing from the model stores the two traits, your scores on both, what the literature search returned, and any note you wrote against it — and for a signed-in account that record syncs. It is a record, on a server, of a named account taking an interest in a specific political question, which is a different kind of thing from a score. Nothing is saved unless you press save. Each saved question also carries its own switch to keep it on this device and out of the account, set per question rather than as an account-wide setting, because the risk is per question too. Nothing you have not saved is ever there.

Quote Resonance and Historical Attribution let you choose an Iran track or a General track. That choice is never synced to the cloud, signed in or not — nothing in your account record indicates which track you took.

Most people never sign in at all — the app is fully functional without an account, and nothing about your usage requires one.

Who can access your account data

Cloud-stored profiles are protected by row-level security: the database only permits a signed-in user to read, change, or delete their own record. There is no separate path for browsing other users’ profile data.

Deleting your data

“Reset model”, in the footer inside the app rather than on written pages like this one, clears your local profile immediately. If you’re signed in, your Profile page has a “Delete my account and data” action that immediately and permanently deletes your verified identity (Google link, email, or phone) and your cloud-stored profile — this is self-service, with no wait or email request required.

Abuse prevention

To deter automated or duplicate submissions, we may derive a one-way hash from your IP address and store it, on its own, with no link to your survey answers, scores, or account. These hashes are automatically purged after 90 days and are never exported alongside or joined with response data.

Hosting and jurisdiction

This application and its database run on infrastructure based in the United States (Vercel and Supabase). We are not currently able to commit to a data-protection standard stronger than what US law requires, or to resisting a legally valid US data request. If your situation carries real risk from that, weigh it before creating an account or entering anything you would not want disclosed under US legal process — the survey itself works fully without an account.

Information collected by hosting providers

Our hosting, domain, and authentication providers may process standard technical information such as IP address, browser type, request time, and security logs. Their processing is governed by their own terms and privacy policies.

Sensitive information

Political and psychological responses can be sensitive. Do not use the current prototype for clinical decisions, employment screening, eligibility decisions, or high-stakes profiling.

Analytics and research

This version of the application does not run third-party analytics and does not use your responses for research. If that changes, this policy and the consent process will be updated before collection begins, and any published aggregate statistic will suppress breakdowns smaller than 20 respondents.

Contact

Privacy inquiries: privacy@projectunaligned.com