Privacy Policy

1. Who we are

"Sondagio" refers to the website sondagio.com, operated by nwsly, Inc., a Wyoming corporation ("we," "us"). Sondagio publishes poll averages, election maps, estimates and forecasts. You can reach us at hey@nwsly.co.

2. What we collect

• Server logs. Our host (Vercel) records standard request data: URL, status, IP address, user agent and time. Used for security and debugging, and kept only for a short period.
• Audience measurement. Vercel Web Analytics counts page views without cookies. Where the consent rules for your region allow it (section 7), we also use PostHog (page views and how the site is used; a project shared with nwsly, linked to your account if you sign in), Google Analytics (visit statistics, IP anonymised) and Microsoft Clarity (click maps and session recordings with text fields masked). None of them is used for advertising.
• Your choices, in your browser. A lang cookie remembers the language you picked (12 months). Your consent choice (sg.consent.v1) and the regional rule that applies to you (sg.geo.v1, 24 hours) are kept in your browser's local storage. None of this is sent back to us.
• Your account (optional). If you sign in, we keep your email address, the elections you choose to follow and whether you want alert emails. Sign-in uses an emailed link or your Google account (Google then shares your name and email with us). Your session is kept in your browser's local storage (sb-…-auth-token). The account is shared with nwsly, our news app, run by the same company: one login works on both.
• Emails you send us. If you write to us, we keep your message to answer it.

3. What we do NOT collect

• Your political opinions, voting intentions or party preferences. Sondagio has no survey or quiz that would ask for them, and accounts never do: you follow elections, not parties or candidates.
• Your name, precise location, contacts or payment details.
• Anything from the third-party sites we link to.

4. What we will NEVER do

• Sell your data, to advertisers, data brokers, campaigns, parties or anyone else.
• Build profiles of visitors' political views or share data for political targeting.
• Add advertising trackers without asking you first where the law requires it.

5. Third parties

• Vercel — website hosting, server logs and Web Analytics (United States).
• PostHog, Google (Analytics) and Microsoft (Clarity) — audience measurement, only with consent where required (United States).
• Supabase — accounts and sign-in, if you create one (United States). Google — only if you choose to sign in with Google.
• Poll figures come from public sources (pollsters, media, electoral commissions, Wikipedia compilations). We send them no data about you.
• If a site embeds a Sondagio map, your visit to that site may load the map from our servers, which creates a server log entry.

6. Your rights

• Everyone: ask us what we hold about you, and to correct or delete it, at hey@nwsly.co. We answer within 30 days.
• EU, EEA, UK and Switzerland: you also have the rights to restriction, objection and portability, and you can complain to your data protection authority (in France the CNIL, in Spain the AEPD).
• New Zealand: you can request access to and correction of your information under the Privacy Act 2020, and complain to the Privacy Commissioner.
• US states with privacy laws: you can know, delete and correct your information and opt out of "sale" or "sharing". We honour Global Privacy Control. We respond within the period your state law sets (45 days in most cases).

7. Cookies and regional behaviour

We detect your country (and US state where relevant) through our own endpoint /api/geo and apply the rule that matches your jurisdiction:

• EU / EEA, United Kingdom, Switzerland, Brazil, Canada, South Africa, China, or location unknown: opt-in. A banner asks first; audience measurement stays off until you accept.
• US states with comprehensive privacy laws: opt-out. No banner; a "Do Not Sell or Share" link is shown, and Global Privacy Control is honoured.
• Everywhere else: no banner, as no consent law requires one. You can still change your choice at any time.

Categories: Essential (language, consent choice, sign-in; always on), Analytics (Vercel Web Analytics, PostHog, Google Analytics, Microsoft Clarity), Advertising (none in use today), Personalization (remembering preferences). Manage cookie preferences.

8. International transfers

Our host processes data in the United States. Where the law requires it, transfers rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.

9. Children

Sondagio is a general-audience information site, not directed at children under 13. We do not knowingly collect information from them; if you believe we have, contact us and we will delete it.

10. Retention

• Account: until you ask us to delete it (email us from the account's address; done within 30 days).
• Server logs: a short period set by our host.
• Audience measurement: Vercel, aggregated counts only; PostHog and Clarity up to 12 months; Google Analytics 14 months.
• Emails you send us: as long as needed to answer, then deleted on request.

11. Sondagio Pro

When Sondagio Pro opens, it will need an email address and payment through a payment provider. We will update this policy before collecting either.

12. Changes and contact

We update this page when our practices change; the date at the top shows the current version. Questions, requests or complaints: hey@nwsly.co.