Privacy Policy

Last updated: 30 October 2026

VoteGoat is a free fan poll run by an individual fan (“we”, “us”). This page explains in plain language what data the site uses and why. Questions or requests: contact@votegoat.site.

What we collect, and why

• Your email address. We use it once to send you a 6-digit verification code, so we can allow one vote per person. We do not keep your email address in our database. We store only a keyed, one-way fingerprint (a hash) of a standardised version of it, which lets us recognise a second attempt from the same address.
• Your vote. Which player you chose is stored together with that fingerprint, and added to the public totals. The public site only shows totals, never individual votes.
• Your IP address. Used to run Cloudflare’s human check and to limit abuse. In our database it is stored only as a keyed hash inside short-lived rate-limit counters, which are deleted within a few hours.
• Age confirmation. You tick a box to say you are 18 or older. We do not verify this and we do not store it per person.

What we do not do

• We do not sell your data, show ads, or build advertising profiles.
• We do not send marketing email. The only email we send is your one-time code.
• We do not set our own cookies. Your browser may store a small note on your device (local storage) that remembers which player you voted for, so we can show your share card. You can clear it any time in your browser settings.

Services that handle data for us

• Cloudflare hosts the site and database and provides the Turnstile human check. Turnstile may process technical signals from your browser to tell people from bots. See Cloudflare’s privacy policy.
• Resend delivers the verification email, so it receives your email address and the code. See Resend’s privacy policy.

These providers may process data in countries other than your own, including the United States.

How long we keep things

• Verification codes: stored hashed, deleted when used or after expiry.
• Rate-limit counters: deleted within a few hours.
• Vote records (fingerprint and choice): kept while the poll is running and for up to 12 months afterwards, then deleted. Anonymous totals may be kept longer.

Your choices

You can ask us to delete the record linking your email address to your vote, or ask what we hold about you, by writing to contact@votegoat.site from the email address you voted with. The anonymous total may remain unchanged after deletion. Depending on where you live, you may have additional rights under laws such as the GDPR or UK GDPR, including the right to complain to your local data protection authority.

Security

Connections use HTTPS. Emails and IP addresses are hashed with a secret key that is not published. No online system is perfectly secure, so please do not reuse this email address for anything you would be unhappy to have exposed.

Children

The poll is for people aged 18 and over. We do not knowingly collect data from anyone under 18. If you believe a minor has voted, contact us and we will remove the record.

Changes

If we change this policy we will update the date above. Continued use of the site means you accept the updated version.