Privacy Policy

1. Scope

This policy explains information processed through Tokensensus accounts, participation features and publisher integrations. A publisher's own website may also process information under its own privacy policy.

2. Information we process

When you sign in with Google, we receive your Google account identifier, verified email address and, when provided, display name. We create an internal member identifier and record account creation and the most recent login. We do not receive your Google password, and we do not request access to Gmail messages, Drive files or contacts.

For article polls, we store the poll, selected option, participation time and a protected browser identifier for duplicate checks. We do not add your Google account identifier to these vote records. Browser-only drafts, saved items and language preferences are stored on your device.

Service requests necessarily process technical information such as IP address, browser information and request details for delivery and security. Application rate limits use a protected IP-derived identifier. Publisher contacts and operational accounts are processed separately for integration and access management.

3. Why we use information

We use account information to create and identify your account, maintain login sessions and handle account requests. Participation information supports vote recording, aggregate results and duplicate prevention. Security information helps prevent misuse and investigate errors.

Google account information is not used to generate article questions, publish your email with votes or grant administrative access automatically. Public membership and operator authentication have separate sessions and permissions.

4. Cookies and browser storage

Essential cookies maintain login and protect the sign-in process. Member login sessions are valid for up to seven days; short-lived sign-in state is valid for up to ten minutes. Logging out invalidates that browser's member session. These validity periods are not a statement that every server row is erased at the exact expiry time.

Language settings and browser-only activity remain until changed or removed in browser settings. Blocking essential cookies can prevent login. Clearing browser data does not by itself delete information already stored on the server.

5. Providers and international processing

Google authenticates the Google account you choose. Hosting and data-storage providers process information needed to operate the service. The current infrastructure can process information in the United States. Detailed provider and international-processing notices must be finalized for the production service.

Public poll results expose aggregate counts and percentages, not account emails. Access to account information is limited to what is needed to operate and secure the service or respond to a lawful request. No Google access or refresh token is retained as a member profile field.

6. Retention and your choices

Account information is kept while the account is maintained. You may request access, correction, deletion or withdrawal through the contact channel below. Requests may require verification of account ownership. If information must be retained to comply with law or resolve a dispute, the applicable reason and period should be explained when handling the request.

You can remove Tokensensus from your Google account's connected applications to stop future authorization. This does not automatically erase an existing Tokensensus account or already recorded votes. Because vote records are not linked to Google accounts, we may be unable to identify individual past votes from an email address alone.

7. Security and updates

We use encrypted transport, protected login cookies, hashed session identifiers and access checks. These measures reduce risk but do not guarantee complete anonymity or absolute security. Vote records are not currently published on a blockchain.

We will publish changes to this policy with the updated date. Where a change requires additional notice or consent under applicable law, we will provide it before applying the change.

Contact

Service operator

TOKENPOST Inc.

Address

21 Penn Plaza New York, NY United States 10001

Privacy contact

Pending confirmation. A contact channel will be published before this draft is finalized.