Security

How access works

Every event has two separate links. The guest link lets people view the poll and submit their own answers — nothing more. The admin link opens the organizer area; changing dates, finalizing or deleting an event also requires the account that created it. Both use long, unpredictable tokens that can't be guessed or counted up, and a guest link can never be used to manage an event.

What protects your data

• HTTPS everywhere. The site and app are served only over encrypted connections.
• Google Cloud infrastructure. Data lives in Firebase (Google Cloud), inheriting Google's physical and network security.
• Server-side rules. Permissions are enforced by the database's security rules, not just by the interface: a guest session can only write its own answers, and management operations require the poll’s organizer account.
• Separate identities for guests. Each guest browser gets its own anonymous session, so two people with the same name can't overwrite each other — and nobody can edit answers that aren't theirs.
• Rate limits on email sending, so event emails can't be abused for spam.
• Automatic deletion. Events, answers, and email records delete themselves about 30 days after the event wraps up, which limits how much data exists to protect at all.
• Stripe-hosted payments. Card entry and billing management happen on Stripe. We store private payment/subscription references, status and access dates, not full card numbers or security codes. Public polls and guest links do not expose billing records.

Paid access

Theme permissions are derived from verified payment records on the server and checked by database rules. A checkout success URL or a browser flag cannot grant Plus. Billing records belong to the purchasing organizer account. Event cleanup does not remove records needed for billing; see Privacy Policy.

The honest limits

A poll link works like an unlisted address: anyone who has the link can open it. That's what makes answering effortless for guests, and it means you should share the guest link only with the people you're inviting — and treat the admin link like a password. If an admin link leaks, delete the poll from its admin page and recreate it.

Reporting a problem

Found something that looks like a security issue? Please tell us directly before sharing it anywhere public — we take reports seriously and will respond as quickly as we can.