WorldSays · Effective 11 September 2026
Privacy
WorldSays is designed to collect the minimum information needed to show public geographic poll aggregates and enforce anonymous daily vote semantics.
Information processed
When you vote, the service processes your selected answer, the server-resolved calendar day, an opaque random browser identifier, and approximate network location such as country, region and city when available. Public pages contain aggregate counts and no viewer-specific state.
Anonymous browser identity
The browser creates a random UUID and stores it locally. The raw UUID is sent to the API but is not persisted in the votes table. The Worker derives a keyed HMAC hash and stores that hash so one browser can update, rather than duplicate, its vote for the same poll and day. This is not an account and does not establish a verified human identity.
IP address and approximate location
Cloudflare necessarily processes the network request and exposes approximate request metadata to the Worker. WorldSays does not store the raw IP address in D1. For abuse prevention, the Worker can derive a separate keyed IP hash used only as a rate-limit key. No precise browser geolocation or GPS permission is requested.
Vote records and public aggregates
D1 stores the anonymous device hash, poll and site identifiers, day, selected choice, resolved place and available country, region or city labels, plus timestamps. Aggregate rows store vote totals by place and choice. Results shown publicly are aggregate and may be briefly cached. Viewer and vote responses are marked not to be cached.
Service providers
Vercel delivers the frontend. Cloudflare provides the API runtime, network handling, rate limiting and D1 database. OpenFreeMap and OpenStreetMap provide map resources on local pages. These providers process requests under their own applicable terms and policies.
Your controls
You can clear this site’s browser storage at any time. Doing so removes the local anonymous identifier and language preference, although server-side records already created are not automatically linked back to you or erased by that browser action. WorldSays currently has no user accounts or profile dashboard.
Advertising and consent
Google AdSense is integrated as an advertising provider. Google may process data associated with ad delivery, including cookies or similar identifiers, IP and network information, device and browser information, and ad interaction or reporting data, depending on consent and applicable law. Personalized advertising is subject to user consent where required. This site uses Google’s certified consent management platform (CMP) flow to collect choices in the EEA, United Kingdom and Switzerland; users can accept, refuse or manage choices through that interface. Google acts under its own applicable privacy policies and terms.