Privacy policy

In short: RocketVote works without accounts, tracking or cookies and only stores what a poll needs.

1. Controller

Jonas Hahn, Hufnagelstr. 9, 80686 München, Germany
Email: jonas.hahn@it-consulting-hahn.de

2. No user accounts

Using RocketVote requires no registration. We do not collect email addresses or passwords.

3. What data is stored

  • Poll content: title, description, proposals and settings of a poll.
  • Optional password: if a poll is protected by a password, we only store an irreversible hash of it (Argon2id), never the password itself.
  • Participant name: you enter your name voluntarily. You may use a pseudonym or initials.
  • Ratings: your resistance points per proposal. In anonymous polls other participants only see aggregated values; in open polls individual ratings are shown with names. You are informed about this before taking part.

Retention: a poll is deleted automatically, including all proposals, names and ratings, once nobody has opened it for 30 days. Every visit restarts this period. The organizer can also delete a poll at any time.

4. Local storage in your browser

So that you are recognised as the same person after reloading, or can manage your poll, the app stores random access keys (tokens) in your browser’s localStorage. Your choice of light/dark theme and language is stored there as well. This data only leaves your browser to identify you to the server and can be deleted at any time via your browser settings.

5. No cookies, no tracking

RocketVote sets no cookies, uses no analytics or advertising services and embeds no third-party content. Fonts are served from our own server (self-hosted), so no connection to external font services is made.

6. Server logs and abuse protection

To deliver the pages and prevent abuse, your IP address is processed briefly: to prevent overload and spam, the application counts requests per IP address (for IPv6 shortened to the /64 network). These counters are only kept in memory and discarded at the latest one hour after the last request. Access logs containing IP addresses are not stored. Technical error logs do not contain IP addresses. The legal basis is Art. 6 (1) (f) GDPR (secure and stable operation).

7. Hosting

RocketVote runs on a server of Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany, located in a data centre in Germany. A data processing agreement according to Art. 28 GDPR is in place with Hetzner. To protect against data loss, the database is backed up daily in encrypted form on the same server; the decryption key is not stored on the server. Backups are deleted after six months at the latest; until then, polls that have already been deleted may still be contained in older backups.

8. Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability and objection, as well as the right to lodge a complaint with a data protection supervisory authority. Please contact the controller named above.