Simple decisions should not require a pile of personal data.

What the app stores

• Decision questions, choices, room settings, anonymous participant identifiers, and votes needed to operate each room.
• Moderator and participant access tokens are stored as protected hashes on the server.
• Anonymous feedback messages and the feedback type and app area you choose, retained for no more than 90 days.
• A pseudonymous abuse-prevention fingerprint may be retained for up to 24 hours. The feedback database does not store the raw IP address.
• Like most hosting services, server security and access logs may temporarily contain technical information such as IP address, browser details, requested page, and time.

Do not put private, confidential, medical, financial, or otherwise sensitive information into a decision or feedback message.

Cookies and browser storage

WYPIIWYGO currently uses only functional storage:

• A local theme preference remembers light or dark mode.
• Local browser tokens let a participant or moderator return to a room from the same device.
• A short-lived feedback security cookie helps prevent forged submissions.
• The private admin area uses essential authentication and security cookies.

There are currently no advertising cookies, cross-site tracking cookies, or third-party analytics cookies.

Retention and sharing

Decision data is retained while needed to operate and maintain the service and may remain until removed during maintenance. Feedback is automatically removed after 90 days, and abuse-limit records expire after 24 hours.

Data is not sold. It may be processed by the hosting provider as necessary to deliver and secure the service, or disclosed when legally required.

Acceptable use

Do not use WYPIIWYGO to:

• Break the law, threaten or harass people, or promote harm.
• Submit personal information about someone without permission.
• Send spam, automate abusive submissions, overload the service, or interfere with other rooms.
• Probe, bypass, or attack the site, its authentication, database, or hosting environment.
• Upload or enter malicious code, deceptive links, or content that infringes another person’s rights.

Abusive content or access may be removed or blocked to protect the service and its users.