Privacy Policy

The short version

Cyberpolis collects the minimum it needs to run a research instrument. It does not sell your data, does not run third-party analytics or advertising trackers, does not use your writing to train AI models, and does not require an account or an email to use the map. If any of that changes, this page changes first.

What is collected

• Questionnaire answers.Your 1–7 stance answers live in your browser's local storage until you choose to save a profile. Nothing is sent to our servers before that.
• Saved profiles. If you save a profile we store your stance answers, any written answers you attached, an optional display name, and a random share token. Profiles are private-by-link: only someone with the link can read them. A separate opt-in flag governs any future public listing — unchecked means never listed.
• Account information (optional). With a username/password account we store the username and a bcrypt hash — never the password itself. With Google sign-in we store the identity Google returns (name, email, subject id). Accounts exist so you can find your profiles again; they are not required.
• Error telemetry. We use Sentry for crash reports. Share-token URLs are redacted client-side before events are sent, so a crash on a shared profile page does not leak the link.
• IP addresses are used transiently, in memory, for rate limiting. They are not written to our database.

What it's used for

Displaying your position on the map, showing your profile to people you share the link with, and research: aggregate, anonymized analysis of where people land relative to public figures and AI models. Published research uses statistics and anonymized aggregates, never your name or your individual written answers without separate consent.

Who else sees it

Whoever you give your share link to. Infrastructure vendors that host the site (Vercel, Railway, Supabase) and error telemetry (Sentry) process data on our behalf. No data brokers, no ad networks, no sale of data — full stop.

Deletion

Clearing your browser's local storage removes everything that was never saved to a profile. To delete a saved profile or an account, contact the operator via the about page with your share link; deletion is permanent and prompt. (A self-serve delete button is on the roadmap; until it ships, email is the mechanism.)

Changes

This is a self-drafted v0 policy — before public-launch traffic, the operator intends to have a lawyer review it. Material changes move the effective date above and are noted on this page.