Privacy Policy

Last updated: April 2026

Our commitment

umbra.vote is built on a simple principle: privacy is not a feature — it is the foundation. We designed every part of this platform to collect the absolute minimum information needed to function, and to make it mathematically impossible to link survey responses to individuals.

What we collect

  • Device identifier.A cryptographic fingerprint derived from your device's biometric authenticator (Touch ID, Face ID, Windows Hello) or browser characteristics. This identifier is hashed — we never receive your biometrics, and the identifier cannot be reversed to identify you.
  • Survey metadata. Survey titles, descriptions, questions, and configuration (eligibility criteria, visibility settings) provided by survey creators.
  • Aggregate response tallies. The total count of responses per option, stored on the Midnight blockchain. Individual responses are never stored in a way that can be linked to a device or person.

What we do not collect

  • Names, email addresses, or phone numbers
  • IP addresses (not logged or stored)
  • Precise location coordinates (location eligibility is verified via country-level proof without revealing exact position)
  • Individual survey responses linked to any identifier
  • Cookies, tracking pixels, or third-party analytics
  • Biometric data (biometrics never leave your device)

How blockchain works in this context

Survey responses are submitted as zero-knowledge proofs to the Midnight blockchain. This means the blockchain verifies that a response is valid (from an eligible, unique respondent) without learning what the response is or who submitted it. Aggregate tallies are stored on-chain and are publicly visible, but individual responses are not.

Important: Data written to the blockchain is immutable. Aggregate survey results cannot be deleted once recorded. However, no personal data is ever written to the blockchain.

Data storage

Survey metadata and device identifiers are stored on our servers to facilitate the service. This data is not shared with third parties. Device identifiers are derived deterministically — we can verify you are the same device across sessions but cannot determine who you are.

Third-party services

We use the Midnight blockchain network for on-chain verification. We use Vercel for hosting. Neither service receives personal data from umbra.vote users. We do not use any advertising, analytics, or tracking services.

Your rights

Because we do not collect personal data, there is generally nothing to request deletion of. If you believe we hold data related to you and wish to inquire, contact us at contact@lovelaces.io.

Changes to this policy

We may update this policy as the product evolves. Material changes will be noted on this page with an updated date. Continued use of the service after changes constitutes acceptance.

Contact

Lovelaces LLC
contact@lovelaces.io