Overview
AuthTally (a product of AR Development) provides a platform for organizing voting-based events and contests. This policy explains what information AuthTally collects, from whom, and how it's used. It applies to three types of people who use AuthTally: event organizers (registered users), voters (the public), and entry submitters (the public).
Information Collected
From organizers (registered accounts)
- Name and email address, collected through account sign-up (email/password or Google Sign-In)
- Optional profile photo
- Event details you create: event name, organization name, location, description, contact email and phone number, and any social media links you add
- Entries you create: names, descriptions, photos, and related details
- Notes and templates you save for your own organizational use (not shared publicly)
- Bug reports you submit through the Help Center, including your email, description, and an optional screenshot
From voters
By default, voting is anonymous and requires no personal information. Depending on how the event organizer configures their event, one of the following applies:
- Anonymous: no personal information is collected. Duplicate-vote prevention is handled locally in your browser, not by identifying you.
- Shared event password: voters enter a 6-digit code set by the organizer. This is not tied to your identity.
- Email verification (only if the organizer enables it): your email address is collected to send a one-time verification code, used solely to prevent duplicate voting on that event.
From public entry submitters
If an organizer opens a public submission form, anyone submitting an entry may provide a name, description, optional photo, and optional social media links. No account is required.
How Information Is Used
The information above is used only to operate the service: creating and displaying events and entries, verifying voters when an organizer requires it, preventing duplicate votes, and responding to bug reports and support requests. AuthTally does not sell personal information or use it for advertising or cross-site tracking.
Third-Party Services
AuthTally relies on a small number of third-party services to operate:
- Firebase (Google Cloud): hosts AuthTally's database, file storage, and account authentication. All account data, event data, and uploaded images are stored here.
- EmailJS: sends voter email verification codes when an organizer enables email verification. Only the email address and verification code pass through this service.
- Web3Forms: delivers bug reports submitted through the in-app Help Center.
- Stripe: processes one-time paid event tier payments (see the Pricing page). Payment card details are never stored on AuthTally's servers.
AuthTally does not use analytics, advertising, or tracking tools.
Local Storage
AuthTally stores a small amount of data directly in your browser (not sent to AuthTally's servers or shared with any third party) to remember your theme preference (light/dark), your preferred view of the voting page (grid/list), and, for anonymous voting, a local flag preventing you from voting twice on the same device.
Data Retention and Deletion
Organizer accounts can be permanently deleted at any time from account settings. Deleting your account removes all of your events, entries, categories, notes, templates, uploaded images, and your profile, including the public versions of that data.
Children's Privacy
AuthTally is often used for events involving minors (for example, school contests). By default, voting requires no personal information. Organizers who enable email verification for an event are responsible for ensuring that's appropriate for their audience and for complying with applicable laws regarding data collected from minors. AuthTally does not knowingly collect personal information from children in connection with anonymous voting, since no personal information is collected in that mode.
Data Security
AuthTally relies on Firebase's security infrastructure and access-control rules to protect stored data. No method of transmission or storage is completely secure, but reasonable steps are taken to protect information in AuthTally's care.
Your Rights
Depending on where you live, you may have rights to access, correct, or delete your personal information. Organizers can do this directly through account settings. Voters and submitters who provided an email address for verification can reach out at roger@atroger.com to request deletion.
Changes to This Policy
This policy may be updated from time to time. Material changes will be reflected by updating the "last updated" date above.
Contact
Questions about this policy can be sent to roger@atroger.com.