Datenschutz / Privacy notice

Bracketed fields are placeholders and must be completed by the operator before the site goes live. This notice is not legal advice; confirm the wording before launch.

Controller

The controller under Art. 4 (7) GDPR is the operator named in the Impressum. For data-protection questions, use the contact address given there.

What the main site does and does not do

The pages of votesecure.net (the front page, this notice, the Impressum and the Contributor Charter) are static. They set no cookies, use no analytics, no tracking pixels, no advertising and no consent banner, because there is nothing to consent to. Fonts are self-hosted on votesecure.net; no font, script or style is loaded from a third-party network such as Google Fonts or a CDN.

The site contains no contact form and stores no personal data of its own.

Server log files

When your browser requests a page, the hosting provider automatically processes the data your browser transmits: IP address, date and time of the request, the page requested, the referrer URL, and the browser and operating system identifier. This is necessary to deliver the site and to keep it secure and stable.

• Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in operating a secure website).
• Hosting provider: [HOSTING PROVIDER NAME AND ADDRESS].
• Retention: log entries are deleted or anonymised after [RETENTION PERIOD, e.g. 7 days / 14 days] unless they are needed longer to investigate a specific security incident.
• A data processing agreement under Art. 28 GDPR is in place with the hosting provider. [CONFIRM.]

Applying to contribute

Applications to the founding cohort are made publicly, as issues on GitHub. If you open an application you do so on github.com, and GitHub, Inc. processes your data as an independent controller under its own terms. See the GitHub Privacy Statement (opens in a new tab). The Charter requires that applications and selection decisions are published, so the content of an application is public by design. Do not put personal data you want to keep private into an application.

votesecure.net itself receives and stores nothing in this process.

The prototype at /demo — third-party services

The prototype voting application (reachable from the front page as “the prototype”, at /demo and under /web/) is older code that has not yet been brought in line with the rest of the site. You should be aware of the following before you open it:

• Script CDNs. The prototype pages load JavaScript libraries at runtime from the public content delivery networks jsDelivr (cdn.jsdelivr.net) and jspm.io (ga.jspm.io). When your browser loads these files, those providers necessarily receive your IP address, the file requested, and standard request metadata (time, referrer, browser identifier). They may be located outside the EU/EEA.
• Blockchain endpoints. If you actually use the prototype, it connects to a public Nervos CKB test-network node at testnet.ckb.dev and links to the block explorer at pudge.explorer.nervos.org. These operators likewise receive your IP address and request data.
• Wallet. Connecting a JoyID wallet involves the wallet provider under its own privacy policy.

• Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in offering a working demonstration without operating our own library and node infrastructure).
• How to avoid it: do not open /demo or the /web/ pages. The rest of votesecure.net does not contact any of these services.

Self-hosting these libraries and removing the runtime CDN dependency is a known task for the prototype; it is recorded in the repository at docs/prototype/third-party-deps.md (opens in a new tab).

On-chain data

If you cast a ballot with the prototype, election parameters and your encrypted ballot are written to the public CKB test network and are, by the nature of a blockchain, permanent and world-readable. They are linked to a wallet address, not to your name. Because the ledger is immutable, this data cannot be deleted or corrected after it is published. Do not put personal data into election text.

Your rights

You have the rights of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20) and objection (Art. 21) under the GDPR, subject to the technical limits of a public blockchain. You may lodge a complaint with a supervisory authority, in particular in the Member State of your residence, place of work or the place of the alleged infringement (Art. 77). The competent authority for the operator is [SUPERVISORY AUTHORITY FOR THE OPERATOR'S FEDERAL STATE].

Changes

This notice will be updated if the site changes. The current version is the one published here.

Last updated: [DATE]. This notice must be reviewed whenever the site's third-party dependencies change — in particular when the prototype is migrated off the script CDNs.