Privacy

Last updated: 7 October 2026

WhichSideAreYouOn.io is a single global vote. We collect as little as possible, never sell data, and use no advertising cookies. Analytics cookies are only set if you accept them.

The controller of this data is Shahlin Ibrahim. Contact: privacy@whichsideareyouon.io.

What we collect

Your vote: which side you chose, and when.
A one-way hash of your IP address (HMAC-SHA256 with a secret key). We never store your raw IP address. For IPv6 we hash only the network prefix.
Your country, as a two-letter code, derived by our hosting provider from your connection. Not your city or location.
How you arrived: the campaign tag in the link (like utm_source=x) or the referring website's domain. Never the full page you came from.
If you choose to join the results list: your email address, your consent and when you gave it, and a link to your vote record (your side, country, when you voted and how you arrived). The link lets us send you results relevant to your side.

Why we collect it

To limit repeated voting and protect the result from automated voting. Each network (IP address) can cast a small number of votes, so households and offices can all take part. The IP hash and a bot check exist only for this (legitimate interests).
To publish aggregate results: totals, and splits by country and by where people came from. Individual votes are never published.
To send you the results report and occasional updates, only if you ask for it (consent). You can withdraw consent at any time.
To count visits and page views with Google Analytics, only if you accept analytics cookies (consent). You can change your choice at any time below.

Cookies

We set one strictly necessary cookie, “wsayo_vote”. It is signed, cannot be read by scripts, and records only that this browser voted and which side it chose. It shows you the results when you return and lets you join the results list. It lasts one year.
Because it is strictly necessary for the service you asked for, it doesn't need your consent.
Google Analytics cookies (_ga and _ga_…) are set only if you click Accept in the cookie banner. They count visits and page views, last up to 13 months, and are never used for advertising. Until you accept, nothing is sent to Google. Your choice is remembered in your browser's local storage.
Cloudflare Turnstile checks that you're not a bot when you vote. It is a security service and does not track you for advertising.

Who processes it

DigitalOcean (the server that runs the site and stores the database), Cloudflare (network delivery, security and bot protection), and Google (visit statistics through Google Analytics, only if you accept analytics cookies). Rate limiting and caching run on our own server and only ever see IP hashes.
These providers act on our instructions. Some are located outside your country, including the United States. Where required, transfers are covered by standard contractual clauses or equivalent safeguards.

How long we keep it

IP hashes and individual vote records: until 90 days after voting closes, then deleted. Aggregate results may be kept and published indefinitely.
Emails: until you unsubscribe, or 12 months after the final report is sent, whichever comes first. Unsubscribing deletes your email immediately.

Your rights

You can ask to access, correct or delete your data, object to its use, or withdraw consent. Email us at the address above.
To find your vote we need to recompute its hash, so please write from the same network you voted from, or tell us the IP address you used. We'll delete the vote once we've confirmed the request.
Every email we send has a one-click unsubscribe link that deletes your address.
You can also complain to your data protection authority, for example your EU/UK supervisory authority or the UAE Data Office.

Children

This site is not directed at children under 13, and we don't knowingly collect their data.