Privacy policy

In short

Polls can be created and answered without signing up.

We do not sell data, do not pass it to advertising networks and do not embed third-party trackers.

Our analytics are our own and cookie-free: we see how many people opened a page, not who they are.

Public polls are visible to anyone — that is their point. Do not put personal details into them.

Poll data

Questions, answer options, slide titles and the text answers participants send are stored as they were typed. This is content created by you or by the people answering your poll.

So that one person cannot vote twice, the participant's browser keeps a random key. Only an irreversible transformation of it (a hash made with the server secret) reaches our database — it cannot be turned back into the key, cannot identify a person, and cannot link their answers across different polls.

Who voted for what is something the service neither knows nor shows — not to you, not to us.

User account

The account is optional. If you sign in with Google, we receive your email address, name and a link to your avatar from Google. We never see or store passwords.

The session key is stored only as a hash: even from a copy of the database nobody could sign in as you. Your browser's user-agent string is stored next to the session so you can recognise your own sign-ins.

The account exists so you can find your polls from another device and schedule their start. You can ask us by email to delete the account — your profile data goes with it.

Cookies and browser storage

lynva.session — what keeps you signed in. Lives 60 days and is stored only as a hash on the server.

lynva.oauth.state and lynva.oauth.locale — temporary, 10 minutes. The first protects the sign-in from forgery, the second remembers the language you started from.

lynva.locale — the interface language, one year.

Your browser's own storage holds the owner keys of the polls you created and your participant key. They are sent nowhere except to this service, and they exist so you do not lose your poll.

We set no advertising or tracking cookies at all.

Visit analytics

We use Umami, a counter running on our own server that sets no cookies. The data goes nowhere else.

It records: which page was opened, where the visit came from, the country, the device and browser type, the screen size. An individual person is not visible in this: instead of an identifier it uses a daily irreversible transformation of the address and browser, which changes every day.

The purpose is simple — to understand which pages people need and whether the service works.

Server logs

The web server records requests: time, page address, response code, IP address and browser string. This is needed for security and for finding faults.

Logs are kept for a limited time (the last few files, usually a few days) and are then overwritten automatically.

The address you return to after signing in with Google is deliberately kept out of the log: it carries a one-time access code.

Where the data lives

The service runs on Oracle Cloud in the London region (United Kingdom). The database lives there too.

Database backups are uploaded daily to Oracle Object Storage in the same region and are deleted automatically after 90 days.

Signing in with Google is handled by Google under its own rules. We only send a request to confirm your identity and receive a name, an email address and an avatar in return.

How long we keep it

Polls and presentations — until their owner deletes them.

Unfinished drafts that never became a poll are deleted automatically after a day.

Account sessions — 60 days, or until you sign out.

Server logs — a few days. Backups — 90 days.

Your rights

You can ask for a copy of your data, for corrections, or for deletion. Writing from the address your account uses is enough.

A poll created without signing in is yours to delete as long as your browser still holds its owner key. If the key is lost, write to us with the poll address and we will help.

If you believe we handle data wrongly, tell us. You also have the right to complain to the data protection authority in your country.

Public polls and search engines

A poll marked as public goes into the open catalogue and may be indexed by search engines. That is what it is for.

If a poll should stay within your own circle, mark it private when you create it: it will not appear in the catalogue, and access stays with the link or the join code.

Presentation and audience pages are closed to search engines: their content changes minute by minute.

Children

The service is not meant for children under 13 and does not knowingly collect their data. If you believe that has happened, write to us and we will delete it.

Changes to this page

If we change how we handle data, we will change this page and update the date at the top. The service's change history is open in the project repository.

How to reach us

Write to syzokryli.pro@gmail.com — the address where we answer questions about the service and about data.