Pollinion

Privacy policy

Last updated: May 2026

1. Who we are

Pollinion is operated as a personal project based in Croatia. We are the data controller for personal data collected through pollinion.com. For privacy enquiries, contact us at info@pollinion.com.

2. What we collect and why

Email address

Collected when you sign in. Used solely to send you a one-time sign-in link (magic link). We do not store a password. We do not send marketing emails.

Legal basis: legitimate interest (authentication).

Demographic information

Age range, country, and gender — all entirely optional and collected only if you choose to provide them. Stored as broad category labels (e.g. "25–34", "France", "Male"), never as precise data. Used solely to produce aggregate statistical breakdowns visible to all users.

Legal basis: consent (you can skip or change this at any time).

Votes and activity

Your daily answers and total answer count are stored against an anonymous internal user ID. No points, levels, streaks, or badges are tracked. This data is never published alongside your email address or any personally identifying information.

If you vote without signing in, a one-way hash (SHA-256) of your IP address is stored solely to prevent duplicate votes on the same question. The raw IP address is never stored. The hash cannot be reversed to identify you.

Legal basis: legitimate interest (operating the service).

Email reminders

If you opt in to daily reminders on your profile page, your email address is used to send you a daily notification when a new question is live. You can opt out at any time from your profile page.

Legal basis: consent.

Session data

A session token is stored in a secure HTTP-only cookie to keep you signed in. No tracking or advertising cookies are used.

Legal basis: legitimate interest (authentication).

3. What we do not collect

We do not track you across the web. We do not store raw IP addresses — anonymous votes use a one-way hash of your IP solely to prevent duplicates, and the hash is not used for any other purpose. We do not use analytics SDKs, advertising networks, or sell any data to any third party.

4. Third-party processors

We use the following sub-processors to operate the service. Each is bound by a data processing agreement:

5. Data retention

Your email address and account data are retained for as long as your account is active. If you delete your account (via your profile page or by emailing us), all personally identifiable data — including your email address, demographic data, votes, and session tokens — is permanently deleted within 30 days.

Aggregate statistics derived from votes (e.g. "42% of users chose option A") are not personal data and may be retained indefinitely.

6. Your rights (GDPR / UK GDPR)

If you are in the EEA or UK, you have the following rights:

  • Access — request a copy of the personal data we hold about you.
  • Rectification — correct inaccurate data. You can update your demographics directly on your profile page.
  • Erasure — delete your account and all associated data. You can do this instantly from your profile page, or by emailing us.
  • Restriction — ask us to stop processing your data in certain circumstances.
  • Portability — receive your data in a machine-readable format. You can download a JSON export of all your data instantly from your profile page.
  • Object — object to processing based on legitimate interest.
  • Withdraw consent — for demographic data, you can remove it at any time from your profile page.

To exercise any of these rights, email info@pollinion.com. We will respond within 30 days. You also have the right to lodge a complaint with your local supervisory authority (in the EU: your national DPA; in the UK: the ICO).

7. California residents (CCPA / CPRA)

We do not sell personal information. We do not share personal information for cross-context behavioural advertising. California residents have the right to know what personal data we collect, to delete it, and to opt out of its sale (not applicable here, as we do not sell data). To exercise these rights, email us.

8. Cookies and tracking

We use the following cookies, all strictly necessary for the service to function:

  • Session cookie — a secure, HTTP-only cookie that keeps you signed in.
  • Language cookie (pln_lang) — stores your preferred language (English or Croatian). Contains no personally identifying information.
  • Demographics cookie (pln_demo) — stores your optional demographic choices locally. Contains no personally identifying information.
  • Announcement cookie (pln_announce_v*) — records whether you have dismissed the site announcement banner.

None of these cookies are used for tracking, advertising, or cross-site profiling.

We use Vercel Analytics to measure aggregate page view counts. This is cookieless, does not track individuals, and does not store any personal data. No data is shared with advertising networks.

9. Children

Pollinion is not directed at children under 16. We do not knowingly collect personal data from anyone under 16. If you believe we have inadvertently collected data from a child, please contact us and we will delete it promptly.

10. Changes to this policy

We may update this policy from time to time. The date at the top of the page reflects the most recent revision. Continued use of the service after an update constitutes acceptance of the revised policy.

11. Contact

For any privacy-related questions: info@pollinion.com