Privacy Policy
Last updated: 12 May 2026
This page explains what data we collect when you sign the petition and how we handle it. We follow LGPD (Brazil) and GDPR (EU) by design: we collect only what is essential, and we do not run marketing trackers.
Data we collect
When you sign, we record your name, email, country, optional city, the language you signed in, and a timestamp. That is it.
Why we collect it
Your data is used to count your voice, display it on the live counter and map, and prevent duplicate signatures. It is never used for marketing, profiling, or any commercial purpose.
IP addresses
Your IP address is never stored. To prevent abuse we keep only a one-way SHA-256 hash combined with a secret salt — it cannot be reversed back to your IP.
Cookies
We use one cookie to remember the language you selected, and a Supabase session cookie only when an administrator logs in. There are no advertising or analytics trackers.
Third parties
Hosting: Vercel. Database: Supabase, on our own server. Anti-bot: Cloudflare Turnstile. Map tiles: MapLibre. None of them receive your personal data beyond what is technically required to deliver the page.
Your rights
You may request access to, correction of, or deletion of your signature at any time by contacting us. Deletions are processed within 30 days.
Retention
Signatures are kept for the duration of the movement. If the movement ends, the data is anonymised or deleted.
Contact: 6billionforpeace@gmail.com