Privacy Policy

What we store

For pool creators: your email address, the pool details you configured, and photos you uploaded. For voters: your email, first name, last name, general location text, and your answers to the pool questions. We hash IP addresses for abuse prevention. We do not knowingly collect information from anyone under 13.

How we use it

To run the pool, notify voters of results, and prevent abuse. We do not sell your personal information. We send transactional emails via Mailgun (subject to their privacy policy).

Roles under data protection law

With respect to voter personal data (name, email, general location, and answers), the pool creator and Womb Wager act as joint controllers under Article 26 of the GDPR and analogous laws, because we each determine part of the purpose and means of processing: the pool creator determines who is invited, what questions are asked, and how the pool is administered; Womb Wager determines the technical means, retention period, security measures, hashing of IP addresses, and use of email service providers for transactional email. As between the parties, the pool creator is the point of contact for voter access, correction, and deletion requests concerning voter identity and answers, and Womb Wager is the point of contact for requests concerning technical data (hashed IPs, cookies, logs). Voters may exercise their rights against either party.

With respect to pool creator account data (creator email, creator-uploaded photos, payment instructions text), Womb Wager is the sole controller.

Cookies

We set a session cookie when you sign in as a pool creator and a short-lived cookie when you edit an existing vote. No advertising or third-party tracking cookies.

Your rights

Email [email protected] to request access, correction, or deletion of your data. Voters can also unsubscribe from any email with the one-click link in the footer.

California residents (CCPA / CPRA)

In the past 12 months we have collected the categories of personal information described above (identifiers, general location, internet activity via hashed IPs, and photographs). We do not "sell" or "share" personal information as those terms are defined by the CCPA/CPRA, and we do not use or disclose sensitive personal information for purposes that require a right to limit. California residents have the right to know, delete, correct, and to non-discrimination for exercising these rights. To exercise your rights, email [email protected]. We will verify your request using the email address on file. You may designate an authorized agent in writing.

European Economic Area and UK residents (GDPR / UK GDPR)

If you are in the EEA, UK, or Switzerland, our lawful bases for processing are (i) performance of a contract (running your pool); (ii) legitimate interests (abuse prevention, service operation); and (iii) consent, where required (e.g., email notifications). You have rights of access, rectification, erasure, restriction, portability, and objection, and a right to lodge a complaint with your supervisory authority. We do not conduct automated decision-making with legal effects. International transfers of your data to the United States are made in reliance on Standard Contractual Clauses or applicable adequacy decisions. Our EU/UK contact is [email protected].

Retention

We keep pool data for 90 days after the reveal and then archive it. Pool creators can delete their pool at any time.

Contact

Reach us at [email protected] for any questions or data requests.