Privacy Policy
Pulsogram asks how things make you feel. That is sensitive by nature, so this page says plainly what is stored, who can see it, and what you can ask us to do with it.
This document is not final. The operator’s legal identity and registered address are still to be filled in (see src/lib/legal.ts). Everything else below describes what the platform actually does today.
1. Who is responsible for your data
The data controller is TODO: your full legal name, or the company name, TODO: registered address.
For anything in this document, write to privacy@pulsogram.com.
2. What we collect, and why
| Data | When | Why we may hold it |
|---|---|---|
| Email and display name | When you register | To give you an account (contract) |
| Your votes | Every time you vote | To produce the aggregate results, which is the service (contract) |
| Age range, education, country | Only if you enter them | Aggregate breakdowns for creators (consent — these fields are optional) |
| Written reasons | Only if you write one | Shown to the creator of that pulsewave (consent) |
| A visitor identifier | When you vote without an account | To count one vote per person (legitimate interest in result integrity) |
| IP address | On requests that write data | Rate limiting and abuse prevention only (legitimate interest) |
| Group membership | If you join a group | To compute that group’s aggregate (contract) |
| Messages you send | If you use direct messages | To deliver them (contract) |
| Payment details | If you subscribe | Handled entirely by Stripe — we never see your card |
3. Who can see your votes
Nobody, individually. A creator sees how many people chose each emotion and the aggregate demographics, never a list of who chose what. Other users see nothing about you at all.
To be exact about the mechanism, because the distinction matters: when you are signed in, your vote is stored against your account. It has to be, so that you cannot vote twice and so that you can be shown your own history. What we guarantee is that it is never disclosed — access is restricted in the database itself, not merely hidden in the interface.
Group aggregates are suppressed entirely until at least three different people in the group have voted, because in a group of two, knowing the split tells you exactly what the other person answered.
4. Cookies
Pulsogram sets no advertising or analytics cookies, and there is no third-party tracker on the site. What is set:
| Name | Purpose | Lifetime |
|---|---|---|
| pulsogram_vid | Counts one vote per visitor when you are not signed in. Set only when you vote. | 1 year |
| Supabase auth cookies | Keeps you signed in. | Session / until sign-out |
| pulsogram-theme | Remembers light or dark. Stored in your browser, never sent to us. | Until cleared |
All of these are strictly necessary for a function you asked for, so under the ePrivacy rules they do not require a consent banner. If we ever add one that is not, we will ask first.
5. Who processes data on our behalf
These providers process data so that the service can run. Several are based in the United States, and transfers rely on the European Commission’s adequacy decision for the EU–US Data Privacy Framework or on standard contractual clauses.
| Provider | What it handles |
|---|---|
| Supabase | Database and authentication |
| Vercel | Hosting and request logs |
| Stripe | Payments — card details go to Stripe, never to us |
| Google, Meta | Only if you choose to sign in with them |
| Anthropic | Summarising written reasons for creators. Text is sent for analysis and not used to train models. |
| Unsplash, Pexels | Images shown in pulsewaves. Loading one reveals your IP to them, as with any image on the web. |
| Telegram | Only if you use the Telegram mini-app |
6. How long we keep it
Account data lives as long as the account does. Votes are kept while the pulsewave exists, because removing one would corrupt a published aggregate. Rate-limiting records are deleted after a day. Messages stay until you or the other party delete them.
Delete your account from Dashboard → Settings. Your profile and messages go with it; your votes stay in the totals, detached from you.
7. Your rights
Under the GDPR you can ask for access, correction, deletion, a portable copy, restriction of processing, and you can object to processing based on legitimate interest. Where we rely on consent — the optional demographic fields and written reasons — you can withdraw it at any time, which does not affect what was already done.
Write to privacy@pulsogram.com and we will answer within 30 days. If you are not satisfied you can complain to the Garante per la protezione dei dati personali.
8. Children
Pulsogram is not intended for anyone under 14. We do not knowingly collect data from children; if you believe a child has an account, tell us and we will remove it.
9. Shared cards
A card you create has its own link. It shows the emotion you chose, the pulsewave, and how it compared — not your name. Anyone with the link can open it, so treat it as public once you share it. Nothing on a card reveals your other votes. How cards work.
Last updated: 17 August 2026