Privacy Policy

Pickly (operated from the domain letspickly.com) is a tool for creating polls, rankings, ratings, and tournaments. It's designed to be used with the minimum amount of personal data possible. We don't sell information, we don't use third-party advertising, and we don't share your data with advertisers.

• The poll content: title, description, options, and if you upload an image, that image.
• A random token to identify the poll in the URL.
• Creation, expiration, and closing dates.
• The alias or name you write when voting (if applicable), saved only in your browser (localStorage) and sent with each vote to identify your response within the poll.

We don't ask for email or password to create or vote anonymously. We don't register individual IP addresses associated with your votes.

If you choose to log in (it's optional), we use Supabase Auth to manage authentication. In that case we store:

• Your email.
• If you use email + password: the password hashed by Supabase. We never have access to the password in plain text.
• If you use Google OAuth: the Google identifier associated with your account and your email.
• An internal identifier (UUID) that associates the polls you create with your account to synchronize them between devices.

You can delete your account by writing to miguelguarrochena.dev. In that case we delete your auth data and unlink the associated polls (the polls can remain anonymous or be deleted, as you prefer).

Pickly uses two types of storage in your browser:

• localStorage / sessionStorage: localStorage / sessionStorage: to save your alias, language, theme, locally created polls, and modal dismisses. It is not sent to any server other than ours.
• Supabase Auth session cookies: Supabase Auth session cookies: only if you log in. They are technical/functional, necessary to keep your session logged in and secure.

We don't use advertising tracking cookies or third-party cookies for invasive analytics purposes.

We use Vercel Analytics to measure traffic in an aggregated and anonymous way (it doesn't store persistent identification cookies and respects the browser's Do Not Track / GPC signals). This information helps us understand which pages have more use and improve the app.

The database and authentication run on Supabase. The hosting is Vercel. Both can host data in US or EU regions depending on the project configuration. Pickly does not transfer data to other third parties.

If you created a poll, you can delete it from the menu (⋮) on the poll page. This removes both the poll and all associated responses from the database.

If you want us to delete a specific response or you can't access the deletion, write to us at miguelguarrochena.dev indicating the poll link.

By design, polls created in Pickly have an expiration date. After 90 days from their creation, the poll and its responses are automatically deleted from our database.

Pickly is not intended for children under 13. If you are a parent or guardian and believe a minor in your care sent us personal data, contact us to delete it.

We may update this document if the app changes. The "last updated" date above reflects the current version.

For any questions about privacy or data: miguelguarrochena.dev.