Privacy Policy

Emberence (“we”, “us”) is a daily-question app: each day you answer one question, then see how the world answered. We built it so we never need — and never want — to sell who you are.

1. Contact

Emberence is an independent project. Privacy questions or requests: hello.emberence@gmail.com.

2. What we collect

• Sign in with Google: your email and basic profile (name/avatar) from Google, used only to create and access your account.
• Sign in by email link: your email address.
• Anonymous: a random device ID (not your name, email, or phone) so your answers count once and your Ember saves on that device.
• Your activity: the questions you answer, your chosen option, your prediction guesses, and your Ember progress (stage, daily-connection count, last-answered date).
• Optional profile (accounts only): a nickname (your only public identity — we do not ask for your real name), and optionally your birth year, gender, country and city. These are entirely optional, are never required to use Emberence, and let us one day show the world’s answers sliced by broad groups (e.g. by age or country) — only ever as anonymous aggregates, and never small enough to identify you. You can also opt in to letting others look up your nickname to compare reads; that is off by default.
• On your device: votes, guesses, Ember state, and a sign-in session in your browser’s local storage. No third-party advertising or tracking cookies.
• Notifications (optional): if you turn on the daily notification, we store your browser’s push subscription (a delivery address issued by your browser — not your email or phone number), your device’s timezone (so the notification arrives in your morning), and your device ID (so we can skip the notification when you’ve already answered). One notification a day at most, and only if you opted in. Turning notifications off deletes this immediately; a device we haven’t seen for 180 days is deleted automatically.

We do not collect your real name, phone number, precise location, or special-category data (politics, religion, health, ethnicity, etc.).

3. How answers are stored (kept honest)

Your answers are stored keyed to your device ID. If you create an account, your answers are linked to that account so one person votes once across devices — meaning we are currently technically able to associate your account with your answers. We are working toward separating identity from answers at the database level; until then we will not claim we “cannot” link them. Our binding promises are in Section 5.

4. How we use it

To run the daily game (one vote per person, and revealing the world’s result after you answer); to save and sync your Ember and prediction score across your devices; to show results only as aggregate totals and percentages; and for basic abuse prevention — duplicate-vote and rate limits, plus Cloudflare Turnstile to tell human voters from bots so the world’s results stay honest (see Section 7).

5. What we will never do

• Never sell or share your email, name, or anything that identifies you.
• Never publish or sell your individual answers — only anonymous aggregates.
• Never link you, publicly, to what you answered.
• Never show a result for a group small enough to identify a person.

6. Google user data

When you sign in with Google we receive your email and basic profile solely to create and authenticate your account. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not transfer or sell this data, or use it for advertising.

7. Processors

Supabase (database, authentication, hosting — encrypted in transit and at rest), Cloudflare (serves the app; and Turnstile bot-protection on voting), and Google (sign-in, only if you choose it). We never send your data to advertising or analytics brokers.

Cloudflare Turnstile. To keep voting honest we use Turnstile, Cloudflare’s privacy-first bot check, on the daily vote. It processes minimal signals (such as your IP address, a TLS fingerprint, and User-Agent) only to distinguish humans from bots — never to identify or profile you. Cloudflare’s handling of these signals is described in its Turnstile Privacy Addendum and its Privacy Policy.

8. Security

HTTPS/TLS throughout; database row-level security so the app cannot read anyone’s raw answers (only aggregates are served). No system is perfectly secure, so we minimise what we hold.

9. Retention & your rights

You can delete your account yourself, in-app, any time: Account → Delete account. This permanently deletes your account and profile (including your nickname), disconnects every device, and removes your notification subscriptions. Your anonymous votes and guesses are retained only as part of the aggregate totals — permanently delinked from your account and no longer connected to you: the pseudonym they were cast under is retired and can never be linked to an account again.

Email hello.emberence@gmail.com to access or export your data. Without an account, anonymous device data clears when you clear this site’s data in your browser. We honour GDPR/CCPA rights regardless of where you live.

10. Children

Emberence is not directed to children under 13, and we do not knowingly collect their data.

11. Changes

If we change this policy, we will update the date above and note material changes in the app.