VersusEcho is a daily dilemma vote, a live echo map and a moderated comment feed. This policy explains what data is collected, why, and how it can be deleted. Data controller: VersusEcho.
Data we collect
When you sign in with Google, only your email address is stored. The scopes requested from Google are limited to openid, email and profile; no profile photo, contact list or any other Google data is requested or stored.
When you vote, the following is recorded: the option you picked (A or B), the time of the vote, and the country and region code resolved from your connection. Latitude and longitude are NOT written to the database; the dot you see on the map is the centre of the country.
If you choose a username, that name, the comments you write and the likes you leave are stored with your account.
When you sign in with Google no separate password is created; authentication happens entirely on Google's side.
How location works without asking permission
Your device's GPS is not used and the browser location permission is never requested. Your country is resolved from the IP address your connection comes from; this is provided by the Cloudflare network that serves you the site.
Only the country and region code are written to the database. The dot on the map is not your location but the geographic centre of your country — every answer from the same country lands on a single point. Your IP address itself is not stored either.
How the data is used
Your email address is used only to identify your account and to enforce the one-vote-per-dilemma rule.
Approximate location is used only to render the echo waves on the map and the per-country percentages.
Your data is never sold, never shared with third parties for ad targeting, and you receive no marketing email.
What is public
Nothing shown on the map or in the statistics identifies you: only the option, the country-centre coordinates and the country code are published.
Your username and your APPROVED comments are public; visitors who are not signed in can see them too. You are not required to use your real name as your username.
Which user a vote belongs to is restricted at the database level; neither you nor any other visitor can see the owner of a vote other than your own.
Comments and moderation
Comments you write are reviewed by a human before they are published. This review happens over Telegram: your comment text and username are sent to a private Telegram channel solely for the approve/reject decision. Telegram acts as a sub-processor in this respect.
Comments also pass through an automatic word filter. A comment caught by the filter is not forwarded to anyone and is not published; it is kept only so the filter can be audited for mistakes.
Comments that are not approved never appear on the site. You can withdraw an approved comment at any time.
Highlighted comments may in future be shared on VersusEcho's social media accounts together with your username.
Cookies and third parties
Session cookie (required): keeps you signed in and is managed by the Supabase authentication layer. Voting is not possible without it.
Google AdSense: ads are shown on the pages and Google may use advertising cookies. You can turn off ad personalisation from Google's ad settings page.
X (Twitter): the feed in the right column is loaded through X's embed script and X may set cookies. The embed is requested with the "do not track" flag; you can block it at browser level to avoid loading it at all. Sharing after a vote is entirely optional and happens on X's own screen.
Infrastructure providers used: Supabase (database and authentication), Cloudflare (delivery and network layer), Google (sign-in and advertising), X (embedded feed), Telegram (comment moderation).
Retention and deletion
Your data is kept for as long as your account exists. When the account is deleted, your email address, your username, profile record, all your votes, comments and likes are deleted from the database together.
You can send a deletion request to the address at the bottom of this page; requests are handled within 30 days at the latest.
Your rights
Under GDPR and Turkish data protection law (KVKK) you have the right to access your data, to have it corrected or deleted, and to object to its processing.
You can exercise these rights by writing to the contact address at the bottom of this page.
Children
The service is not directed at users under 13 and no data is knowingly collected from that age group.
Changes
When this policy changes, the update date at the top of the page is refreshed. Significant changes are also announced inside the app.
For requests or questions about this page: agosmartware@gmail.com