Privacy Policy

Who is responsible

The data controller is Timur Demir, 837 19th St NE, Washington, DC 20002, United States. For any privacy question or request, write to timurdemir3426@gmail.com.

What we store when you vote

• A vote identifier. To enforce one vote per connection we need something stable to key on. We do not store your raw IP address: it is combined with a secret salt and hashed (HMAC-SHA-256), and only the truncated hash is written to the database. Anyone who obtained the database without the salt could not work out an IP address from it. We treat the identifier as personal data all the same.
• Which state you voted for, and when.
• A session cookie (hl_sid) containing a random identifier. It is strictly necessary: it powers the visitor and online counters, and it is the fallback identity for the one-vote rule when no reliable connection address is available. It contains no personal information, is HTTP-only, and expires after one year.

None of this includes your name, email address or any account, because the site has no accounts.

What we store when you buy a sponsorship

The title, description, logo and destination link you submit are published on the site — that is the point of the product — and are retained in the throne history even after you are displaced.

If you upload a logo instead of linking one, the image file itself is stored on our server and served from this site. It is resized in your browser before it is sent, so no camera or location metadata that the original file may have carried reaches us. If you do not go on to publish it, the file is deleted automatically within 24 hours.

Payments are processed by Stripe. Your card details are entered on Stripe's own checkout page and never reach our servers. We store only the amount, the state, and a payment reference. Stripe acts as an independent controller for payment data — see stripe.com/privacy.

Third parties

• Cloudflare Turnstile runs an invisible bot check when you vote. Cloudflare receives your IP address and browser signals for that check. We receive only a pass/fail result.
• Stripe processes payments, as described above.
• Sponsor logos that are linked rather than uploaded load directly from the sponsor's own domain, so that domain can see that your browser requested an image. Uploaded logos are served from this site and involve no third party.

We do not use Google Analytics, advertising pixels, or any cross-site tracking, and we never sell data.

How long we keep things

• Session rows older than 24 hours are deleted automatically while the site is in use.
• A vote is kept until you move it or the site is reset.
• Uploaded images that are not published on a state within 24 hours are deleted automatically.
• Published sponsorship records are kept indefinitely as part of the public throne history.

Your rights

Depending on where you live (GDPR in the EU/UK, KVKK in Türkiye, CCPA in California, and similar laws elsewhere) you may have the right to access, correct, delete, or restrict the processing of your personal data, and to lodge a complaint with your local supervisory authority.

To exercise any of these rights, email timurdemir3426@gmail.com. For sponsorship records, tell us the state and the link you published so we can find it.

Votes are different, because the only thing stored against a vote is a salted hash of your connection — there is no name or address to search by. You can change your vote yourself at any time from the site; the previous one is deleted, not archived. If you want a vote deleted outright, write to us from the same internet connection you voted on, because that is what lets us locate the record.

Children

This site is not directed at children under 13, and we do not knowingly collect their data.