Make your mark.
Stay anonymous.

We can prove that you voted.
We can never see how.

Your email confirms you're eligible and stops double-voting. Your ballot is stored on its own — with no link back to you. Two separate records that never touch.

What we keep, and for how long

We store the organizer's email (and the date they last signed in), each member's email and whether they have voted, and the anonymous ballots. Organizers sign in with an emailed link and a browser cookie; there are no passwords. Ballots are never linked to voters. Organizers can delete a poll at any time once it is closed. Polls that sit inactive for 365 days are deleted automatically, and the results are emailed to the organizer first. Drafts whose organizer never confirmed their email are deleted after 30 days; nothing has been sent to anyone by then. Teams can create an organisation: we also store its name, its members' email addresses and roles, and any saved member lists (names and emails). A saved list is deleted after 365 days without use (with a warning 30 days before, to its owner or the organisation's owners), and an organisation with no polls and no lists that sits inactive for 365 days is deleted. Messages sent through the contact form are kept for 365 days. More detail

Anywhere a group needs a fair, secret vote.

Without buying election software or standing up a spreadsheet nobody trusts.