Last updated: 8 August 2026
1. Who we are
Answrr ("Answrr", "we", "us", or "our") is a brand of SparrowTechnologies s.r.o., which acts as the data controller for personal data processed through answrr.com and related services (the "Service").
Contact for privacy matters: [email protected].
This policy explains how we collect, use, store, and share personal data when you visit our website, vote in a poll, or use the organizer (admin) tools, in accordance with the EU General Data Protection Regulation (GDPR) and applicable Slovak data protection law.
2. Whose data we process
- Voters — people who submit and confirm a vote in a poll.
- Organizers / admins — people who create or manage polls via magic-link access.
- Website visitors — people who browse answrr.com (including analytics, where enabled).
3. Personal data we collect
Depending on how you use the Service, we may process:
- Email address — to identify voters, send vote-confirmation emails, and authenticate organizers.
- Vote content — selected poll options (and free-text options you submit, where a poll allows them).
- Technical data — IP address and browser user agent, stored with votes and admin sessions to help prevent abuse and protect poll integrity.
- Session / authentication data — magic-link tokens and session cookies for organizer access.
- Usage / analytics data — aggregated or pseudonymous usage information via Google Analytics when analytics is enabled (e.g. pages viewed, device/browser type, approximate location derived from IP).
We do not intentionally collect special categories of personal data (e.g. health, political opinions, religious beliefs). Please do not include such information in free-text poll options.
4. How we collect data
- Directly from you when you vote, confirm a vote by email, sign in as an organizer, or contact us.
- Automatically from your device when you use the Service (IP address, user agent, cookies / similar technologies).
- From poll organizers only to the extent they invite you to vote or grant you admin access by email.
5. Purposes and legal bases
We process personal data only where GDPR Article 6 provides a lawful basis:
| Purpose | Legal basis |
|---|---|
| Provide email-verified voting (receive ballot, send confirmation link, count confirmed votes, show results) | Art. 6(1)(b) — performance of a contract / steps at your request; and Art. 6(1)(f) — legitimate interest in running fair, auditable polls |
| Prevent fraud, disposable emails, duplicate or abusive voting (including IP / user agent checks) | Art. 6(1)(f) — legitimate interest in Service integrity and security |
| Authenticate organizers and maintain admin sessions | Art. 6(1)(b) — performance of a contract; Art. 6(1)(f) — legitimate interest in securing accounts |
| Operate and improve the website (analytics, where enabled) | Art. 6(1)(a) — consent, where required for non-essential cookies / analytics; otherwise Art. 6(1)(f) where applicable |
| Respond to support and data-subject requests | Art. 6(1)(c) — legal obligation; Art. 6(1)(f) — legitimate interest in assisting users |
| Comply with law, defend legal claims | Art. 6(1)(c) and Art. 6(1)(f) |
Where we rely on legitimate interests, you may object (see Section 10). Where we rely on consent, you may withdraw it at any time without affecting prior lawful processing.
6. Voting and confirmation emails
When you vote, you provide an email address and your selection(s). We store the ballot as unconfirmed until you follow the confirmation link we send by email. Only confirmed votes are counted toward public results. We may reject addresses that appear disposable or invalid so campaigns remain fair.
Poll organizers can see voter emails and related vote records for polls they manage, so they can administer the campaign, correct mistakes, and audit results.
7. Who we share data with
We do not sell personal data. We share it only with:
- Poll organizers — voter emails and vote details for polls they administer.
- Service providers (processors) — hosting, email delivery, content delivery / security (e.g. IP resolution via reverse proxies), and analytics providers, acting on our instructions under data-processing agreements.
- Authorities — where required by law or to protect rights, safety, or the integrity of the Service.
If an organizer is established outside the EEA/UK, sharing voter data with them may involve an international transfer necessary to run that poll at the organizer's and voter's request.
8. International transfers
Some providers (for example email or analytics services) may process data outside the European Economic Area. Where that happens, we use appropriate safeguards under GDPR Chapter V, such as adequacy decisions or Standard Contractual Clauses (SCCs), together with any supplementary measures required.
9. Retention
We keep personal data only as long as needed for the purposes above:
- Vote and voter records — for the life of the relevant poll and a reasonable period afterward so organizers can audit results and handle disputes, unless you successfully request earlier deletion and deletion does not conflict with legal or integrity obligations.
- Admin sessions — while the session remains active or until it expires / is revoked.
- Support correspondence — as needed to resolve your request, then for a limited archive period.
- Analytics — according to the retention settings of the analytics tool we use.
To request deletion, see Data deletion or email [email protected].
10. Your rights under GDPR
If you are in the EEA (or otherwise protected by GDPR), you may have the right to:
- Access your personal data
- Rectify inaccurate data
- Erase data ("right to be forgotten")
- Restrict processing
- Data portability
- Object to processing based on legitimate interests
- Withdraw consent where processing is consent-based
- Lodge a complaint with a supervisory authority (see Section 14)
To exercise these rights, contact [email protected]. We may need to verify your identity (for example by confirming control of the email address concerned). We will respond within the timeframes required by GDPR (generally one month).
Note: erasing a voter record may be limited where data remains necessary to preserve the integrity of a closed poll, comply with law, or establish/defend legal claims.
11. Cookies and similar technologies
- Essential cookies — used to keep organizers signed in after magic-link authentication. These are necessary for the Service to function.
- Analytics cookies — Google Analytics may be loaded when configured, to understand how the Service is used. Where required by law, we rely on your consent for non-essential cookies.
You can control cookies through your browser settings. Blocking essential cookies may prevent admin login from working.
12. Security
We apply appropriate technical and organizational measures to protect personal data, including access controls for admin tools, hashed confirmation tokens for vote verification, and transport encryption (HTTPS). No method of transmission or storage is completely secure; please use a real email address you control and treat confirmation links as confidential.
13. Children
The Service is not directed at children under 16. We do not knowingly collect personal data from children under 16. If you believe a child has provided us data, contact us and we will take appropriate steps to delete it.
14. Supervisory authority
You have the right to lodge a complaint with the Slovak data protection authority:
Úrad na ochranu osobných údajov Slovenskej republiky
Hraničná 12, 820 07 Bratislava 27, Slovak Republic
Website: dataprotection.gov.sk
You may also contact the supervisory authority in your EU/EEA country of residence or workplace.
15. Changes to this policy
We may update this privacy policy from time to time. The "Last updated" date at the top will change when we do. Material changes will be reflected on this page. Continued use of the Service after an update means you acknowledge the revised policy.
16. Contact
Questions about privacy or this policy: [email protected]