Privacy Policy
An independent fan fantasy project. Not affiliated with or endorsed by Phish or any featured artist. Votes do not determine any artist's setlist.
This policy explains what The Costume Ballot (the "Site") collects, why, who handles it, how long it is kept, and what choices you have. The Site is operated by Cryptoes LLC. Privacy contact: [email protected].
1. Short version
- You can browse without an account. Your preview ballot and show stay in your browser.
- To cast a counted vote, you sign in. We collect your email address, a handle you choose, and your provider account identifier.
- Your handle is public. Your email address is private.
- We use essential storage for your sign-in session. We do not use advertising cookies or trackers.
- You can ask for a copy of your data and can delete your account.
2. Data we collect
| Data | Source | Public? | Purpose |
|---|---|---|---|
| Email address | You (email sign-in) or Google | No | Sign-in, one-time codes, account security, notices about your account, replies to your requests |
| Provider subject identifier (the stable account ID from Google, or from the email sign-in system) | Google or the auth system | No | Recognize your account without relying on a name or email string |
| Handle and avatar choice | You | Yes | Attribute your nominations, shows, and likes |
| Votes (treat allocations) and vote history | You | Totals are public. Your individual ballot is not. | Count votes, enforce the monthly budget, detect abuse, produce rankings |
| Saved shows, drafts, and likes | You | Published shows are public through their share link. Drafts and likes are private. | Provide the show builder and sharing |
| Nominations and pitches | You | Accepted nominations are public. Your handle may be shown with them. | Build the catalog |
| Terms acceptance record (version and time) | You | No | Show which terms applied to your votes |
| Reports you file and moderation records | You and the Operator | No | Handle abuse, appeals, and takedowns |
| Technical and security logs (such as IP address, browser type, request time, and error records) | Your device and our providers | No | Secure the Site, limit abuse, fix errors |
We do not ask for your real name, phone number, birthday, contacts, calendar, or mailbox. When you use Google, we request only your email address and basic profile information. Our authentication provider, Supabase, may store the name and profile photo address that Google returns as part of the sign-in record. The Site does not display or use them, and we do not keep Google access tokens for later use.
We do not collect payment information because the Site takes no payments.
3. Who handles data for us
| Provider | Role |
|---|---|
| Supabase | Authentication and database. Stores account records, votes, shows, and nominations. |
| Cloudflare | Hosting and delivery of the Site. Processes requests, including IP addresses, and may keep network logs. |
| Email delivery service | Sends sign-in code emails. Receives your email address and the message content. |
| Sign-in with Google, if you choose it. Google has its own privacy policy. The Site also loads fonts from Google Fonts, which can receive your IP address. |
These providers act on our behalf under their own terms. We do not sell your personal data. We do not share it for advertising. We may disclose data when the law requires it, to enforce our Terms, or to protect people or the Site. Your data may be processed in the United States and other countries where these providers operate.
4. Cookies and browser storage
The Site uses essential browser storage to keep you signed in and to hold your preview ballot and draft show on your device. This storage does not track you across other websites. The Site sets no advertising or marketing cookies. The Site does not run advertising trackers or third-party analytics scripts.
If you clear site data in your browser, you sign out and lose any preview ballot or show that has not been saved to an account.
5. Retention
- Account data (email, handle, provider identifier, votes, shows, likes, drafts): kept while your account is open.
- Routine security logs: 30 days. If an incident requires a longer period, we document the reason and the extension.
- Moderation records (reports, actions, appeal outcomes): 24 months after the matter closes.
- Copyright notices and counter-notices, and records needed for the repeat-infringer policy: 3 years after the matter closes.
- Backups: kept only if the database plan in use includes them, and rolled off on that plan's schedule.
- De-identified aggregate history (for example, monthly totals per candidate): kept after deletion. See Section 7.
6. Your choices: access, export, correction
You can change your handle and avatar from your account page. You can download a copy of the data connected to your account from the account page. You can also write to [email protected] from the email address on the account, and we will respond within 30 days.
Residents of some places have additional rights, such as access, correction, deletion, and appeal of a refusal. We will consider requests from any user.
7. Account deletion
You can delete your account from the account page or by writing to [email protected]. Deletion removes your profile, handle, current and past allocations linked to your account, saved drafts, likes, and provider links. Published shows are removed from public view. Nominations you made may remain in the catalog without your handle if they were accepted.
Some records remain for the periods in Section 5, and we keep de-identified aggregate history, such as how many treats a candidate held in a closed month, so that past rankings stay accurate. Aggregate history has no account identifier attached. We do not claim it is impossible to link back in every case, for example where a month had very few voters, so we do not publish month-by-month totals for candidates with very few supporters.
8. Security
We limit staff access, use provider-managed authentication, and keep provider secrets on the server side and out of the Site's code. One-time codes expire, work once, and have attempt and resend limits. No system is fully secure, and we do not promise absolute security. To report a security problem, write to [email protected].
9. Age
The Site is a general audience service for people 13 and older. We do not knowingly collect personal data from children under 13. If we learn that we have, we will close the account and delete the data, subject to legal requirements.
10. Phish history data
The Site shows simple facts about whether and when Phish has played a song, with credit and a link to the source, chiefly Phish.net, and links to phish.com. The Site does not republish setlists. Facts that have not been checked say so.
11. Changes
We may update this policy. The current version and effective date appear on this page. If a change is material, we will tell signed-in users on the Site or by email before it applies to them.
12. Contact
Operator: Cryptoes LLC. Mailing address: 1200 Veterans Hwy, Ste B-3, Bristol, PA 19007. Privacy contact: [email protected].