← Back to home

Privacy Policy

Last updated: 21 May 2026

Passport Politics ("we", "us", "our") is a group planning tool that helps groups make decisions together. This policy explains what personal data we collect, how we use it, and your rights under UK GDPR and the Data Protection Act 2018.

1. Who we are

Passport Politics is operated by Declan Haynes. You can contact us at declanhaynes123@gmail.com.

2. What data we collect

If you create an account

  • Your email address and password (via Supabase Auth)
  • If you sign in with Google: your name and profile email from Google OAuth

When you create or join a room

  • The display name you choose for the room (e.g. "Tom")
  • The room name, options, and any details you add
  • Your votes, priority allocations, and concerns within that room
  • Messages and reactions you send in the room activity feed

Automatically

  • Basic usage logs (via Cloudflare Pages infrastructure — no personal identifiers)
  • Your IP address may be processed by Cloudflare as part of DDoS protection

We do not use cookies for tracking. We do not sell your data. We do not run third-party advertising.

3. How we use your data

  • To run the service — storing rooms, votes, and results so your group can see them
  • Authentication — letting you sign in and access rooms you have created
  • Real-time updates — syncing votes and activity across group members in the same room

The legal basis for processing is contract performance (providing the service you requested) and legitimate interests (keeping the service secure and functioning).

4. Who we share data with

We use the following sub-processors to run the service:

  • Supabase Inc. (database and authentication) — EU and US regions. Covered by Standard Contractual Clauses.
  • Cloudflare Inc. (hosting and CDN) — global CDN with EU data-routing options.

We do not share your data with any other third parties.

5. How long we keep your data

  • Room data (votes, options, messages) is kept for as long as the room exists
  • Account data is kept until you delete your account
  • You can request deletion of your data at any time (see section 6)

6. Your rights

Under UK GDPR you have the right to:

  • Access — request a copy of your personal data
  • Correction — ask us to fix inaccurate data
  • Deletion — ask us to delete your account and associated data
  • Objection — object to processing based on legitimate interests
  • Portability — request your data in a machine-readable format

To exercise any of these rights, email declanhaynes123@gmail.com. We will respond within 30 days. You also have the right to lodge a complaint with the ICO (UK data protection authority).

7. Votes and concerns

Concerns you raise in a room are shared with the group but your name is not attached to them — they are anonymous within the room. Your vote allocations are visible to anyone in the room once the result is revealed.

8. Children

Passport Politics is not intended for children under 13. We do not knowingly collect data from children under 13.

9. Changes to this policy

If we make material changes we will update the date at the top of this page. Continued use of the service after changes constitutes acceptance of the updated policy.

10. Contact

Questions about this policy: declanhaynes123@gmail.com