Privacy

• Email Used to sign in. It is never displayed publicly, sold, or shared with advertisers.
• Newsletter email (optional) If you subscribe to project updates, we store your email only to send those updates. It is never shared, sold, or linked to a platform account. Every message includes a one-click unsubscribe.
• Display name Shown publicly only where you choose to use it — for example, on the accuracy leaderboard, which is strictly opt-in. You can change it at any time.
• Birth year Self-reported and used only to determine an aggregated age band (for example, 25–34). Accounts require a minimum age of 16; registrations below that age are rejected.
• Location Haiti + département, or diaspora + country, provided by you.
• Your predictions and citizen votes Including your revision history. We keep each change because prediction accuracy depends on it (see Methodology). Individual answers are never made public — see Anonymity.
• Bookmarks Private — the races and candidates you choose to save.

• Identity documents. No postal address, phone number, or national ID number.
• Tracking. No third-party tracking cookies, behavioral analytics, or advertising pixels.
• IP addresses Beyond a temporary record used to rate-limit abuse. It is retained for less than 24 hours and is never linked to your answers.
• Payment or financial data. Pamelection is free to use, so we do not collect payment information.

Every public number on the site is an aggregate. Individual predictions and citizen votes are never displayed by user. Any demographic segment — département, diaspora country, or age band — with fewer than 25 participants is hidden entirely. This k-anonymity threshold helps prevent individuals from being identified through small groups.

We also publish only predefined segments, never arbitrary combinations. “Ouest” or “25–34” can be shown publicly. “Women 25–34 in Nippes with a specific prediction” can never be queried.

We use strictly functional cookies only — a session cookie for login, a language preference, and short-lived anti-abuse challenge state on forms. No advertising cookies, analytics cookies, or fingerprinting. The Cookies page lists every one. It is the complete inventory and is updated before anything new is introduced.

The platform relies on a small number of service providers, each with a limited role:

• Supabase Provides database, authentication, and file storage services. Data at rest is encrypted, and row-level security policies restrict access according to the requesting user.
• Vercel Hosts the web application. Standard access logs, such as URL, response code, and timestamp, are retained for a limited period for operational reliability. We do not use analytics on top of them.
• Cloudflare Turnstile Protects our forms against automated abuse without puzzles or behavioral tracking. It runs only on form pages, and any challenge state it stores is short-lived and strictly functional (see Cookies).

You can delete your account at any time from the My account page. When you delete your account:

• Personal data is erased. Your email, birth year, and location are removed from our active systems. Encrypted backup copies expire within 30 days.
• Public traces are removed. Your display name is removed from leaderboards and anywhere else it appeared. Any remaining references are anonymized.
• Future aggregates exclude your answers. Your answers are removed from aggregates calculated after your account is deleted.
• Published history remains. Public aggregates already published remain unchanged as part of the historical record. Your contribution to those aggregates was already anonymized and was never displayed individually, so preserving them does not expose your identity.

You can view and update your personal data from the My account page, delete your account at any time, or request a copy of the data associated with your account by contacting us. These rights apply equally to all users, regardless of where they live.

Administrative actions — such as creating races, entering results, or resolving disputes — are recorded in an audit log accessible to authorized administrators. The log records administrative actions only; it does not contain individual users' predictions, citizen votes, or personal data.

Questions about this policy, requests to access your data, or privacy complaints: contact@pamelection.org. We aim to respond within 7 days.