Privacy

What stays on your device only

• The candidates you picked, per election and per state.
• Your state and city, your language and your theme.
• This lives in your browser storage and is never sent to us. There is no address on our server capable of receiving it.

What does not exist here

• No sign-up, no account, no login.
• No behaviour tracking and no advertising.
• We do not sell or share any data, because we hold none to sell.
• We never publish statistics about user preferences, not even aggregated.

What the server sees

Like any website, the server keeps technical access logs: IP address, requested page and time. They exist to operate the service and investigate failures. They cannot be linked to your list, because your list never reaches the server.

Usage measurement

We count how many people open each screen and how long the app takes to load, with a tool that uses no cookies, does not store the page address containing candidate data and creates no visitor identifier. That is why there is no consent banner: there is nothing to consent to. It never sees your cheat sheet, nor which candidate you opened.

When the app cannot update itself, it tells our server four things: that it got stuck, which version is running, for how many hours, and whether it is Android or iPhone. Nothing else. No identifier is sent, your cheat sheet is never sent, and the server keeps no row per device · it adds 1 to a counter and forgets the request. It exists so we know whether the problem is affecting many people.

Error reports

When the app breaks on your screen, it sends the fault to a third-party service (Sentry) so we can fix it. That includes the error message, where in the code it happened, the app version, the browser and the device, and the screen's path · but the path is sent without the part that identifies the candidate. It does not include your list, which candidate you opened, your IP address, and there is no visitor identifier. There is no session recording.

Reminders

If you turn on reminders, the server stores a technical address your browser creates to receive notices. It is used for three notices, the same for everyone: the day before, polls opening and the results. The server never receives your cheat sheet, your state or your language: the device itself decides the wording of the results notice, by comparing the cheat sheet stored on it with the public list of elected candidates. Turning reminders off in Settings deletes that address.

Where the data comes from

From the open data of Brazil's Superior Electoral Court. Every item shown carries its source and the date it was collected. We produce no information of our own about candidates and pass no judgement.

Found incorrect data

The data comes from an official source and may carry inconsistencies from origin. Every profile has a button to report wrong data: if the app shows something different from what the TSE publishes, that is our defect and we fix it; if it matches the TSE, the correction belongs to the record, and the button takes you to the official page. The message leaves from your own email app and we keep nothing you write.