Privacy
What we keep about you, what anyone can see, and which services handle it.
What we keep
- Your email address
- If your account has one, we use it to sign you in and to send the emails described below. No one else on whatatake sees it.
- Your name and handle
- The display name you choose, and your handle. If you sign in with Google or Telegram, it also sends us your name and profile picture, and we suggest that name as your display name.
- Your takes
- Each take's words, whose take it is, its date or condition, and its reach. With it, anything you add: its context, a friend's name, a link to a post and our copy of that post, a screenshot, a verdict and its evidence, or a stake's terms.
- Groups and follows
- The groups you start or join, and the takes you follow.
- Your answers
- Each time you answer a public take with Agree or Disagree, or take your answer back, we keep it with its date. A change is kept beside your earlier answer, not in its place.
- Your Telegram account
- If you sign in with Telegram or connect it in Settings, Telegram sends us your Telegram ID, name, username and the address of your profile picture. We keep them with your account so you can sign in with Telegram, until you disconnect it. While our bot's messages are on, we also keep your chat's ID so the bot can message you. We delete it when you turn messages off, send /stop or block the bot. When you send the bot a take, we keep its draft for a day so you can log it: the words, who said them, and Telegram's reference to any photo.
We keep your account and your takes for as long as whatatake runs, unless you ask us to delete them. A group take is deleted when the group's owner deletes the group.
What anyone can see
Your display name and handle are on your profile, which anyone can open. Members of your groups also see your display name.
Each take's reach decides who can read it: only you, a group, anyone with the link, or everyone. Whoever can read a take sees your display name on it. Public takes are also listed on Explore and on your profile, and search engines can find them.
A take's words can't be changed once it's logged. Its reach can widen once: you can share a private take by its link. If we hide a take after a request, only its author can read it from then on.
When you answer a public take, your profile lists it with your side and its date, and anyone can see that list. To keep it to yourself, choose Only you under Answers in Settings. That hides your earlier answers too.
A take's page shows how many people agree and disagree, and a line of the share who agree over time. Neither names anyone. The line can move when one answer arrives, though, so someone who knows when you answered might work out which way you did.
Notifications
We tell you when a take of yours is due, and when a take you follow gets its verdict or changes. They come by email. While our Telegram bot's messages are on, they come to your Telegram chat instead. An account with no email gets none while those messages are off.
Every email has a link to stop them, and every Telegram message about a take you follow has a button that stops messages about that take. You can turn them all off in Settings. We keep a record of each notification we send.
Sign-in links come only by email. To sign in with Telegram, you confirm in Telegram, and our bot never sends you a sign-in link.
What we measure
We count visits to home, a take's page, Explore and source pages. For each visit, we record the page, the site that sent you, and any campaign tags in the link.
We also record what happens on your account: signing up and whether you used email, Google or Telegram, starting to log a take before you sign in, logging a take and whether you started it on home, sharing one by its link, following one, answering one, recording a verdict, starting, joining or deleting a group, connecting or disconnecting Telegram, changing who sees your answers, and each notification we send you. Each record names your account or your browser by an ID. It never includes your email address, the words of a take, or which side you answered.
Vercel also counts visits to every page, without a cookie. For each visit, it records the page, the site that sent you, your city, and your device and browser.
Cookies and browser storage
- Sign-in cookies
- They keep you signed in. Supabase sets them.
- wat_vid
- A random ID for your browser, so we don't count a return visit as a new visitor. When you sign in, we link that browser's earlier visits to your account. It lasts a year.
- wat_att
- Where your first visit came from: the site that sent you, the first page you opened, and any campaign tags. It lasts a year.
- wat_answer
- If you answer a take before signing in, it holds the take and your side until you've signed in and the answer is saved, for 30 minutes at most.
- whatatake:home-take
- If you write a take on home, your browser keeps its words until Log a take opens with them. After a day, your next visit deletes them.
We don't use advertising cookies, and we don't sell your data.
Services that handle your data
- Supabase
- Signs you in, and stores the database and uploaded images on servers in Ireland.
- Vercel
- Hosts whatatake and counts visits to its pages. Our code runs in Dublin.
- PostHog
- Stores our records of visits and activity, in the EU.
- Resend
- Sends our emails, so it receives your email address and each email.
- Telegram
- Signs you in, when you choose to sign in with Telegram. Delivers our bot's messages while they're on, so it receives each one, including the take's words and its link.
- Google Gemini
- Drafts a take, and sorts each public take into a topic with up to three tags. It receives the words you type or send our bot, or the text of the post you link, and never a screenshot, a photo or your account details. Google doesn't use that text to improve its products. It keeps the text for a limited time, only to catch misuse and meet legal requirements.
- Bluesky and X
- When you paste a link to a post, we fetch that post from its site.
- Sentry
- Receives a report when our code fails on the server. A report can include the address of the page.
- Signs you in, when you choose to sign in with Google.
Several of these companies are based in the United States, and your data might be processed there.
Your choices
Change your display name in Settings. Your handle is permanent.
Choose who sees the answers on your profile in Settings: everyone, or only you.
Turn notifications off in Settings. Stop them for one take with the link in its email or the button under its Telegram message. Turn Telegram messages off in Settings, or send /stop to the bot. Disconnect Telegram in Settings to stop signing in with it.
You can't edit a take, or delete one on its own. To get a copy of your data, correct it, or delete your account and your takes, email privacy@whatatake.com. If your account has no email, add the address you write from in Settings first, so we know the request comes from you.
Deleting your account deletes your profile, takes, follows and screenshots. A group you started stays with its other members, and the member who joined first becomes its owner. We keep your handle, linked to nothing else, so nobody can take it after you.
Deleting your account deletes your answers too, so the counts on the takes you answered go down, even on a take whose answers have closed.
If you're in the EU or the UK, you can also complain to your data protection authority.
If a take is about you
If a take names or quotes you, email privacy@whatatake.comwith its link, and we'll review it. Someone acting for you can ask too.
We take it down unless it's about what you said in public in a public role, with nothing about your private life.
Then only its author can read it, and we tell them why. We answer within a month.
To report a take that breaks the law, email us its link and the law it breaks.
Contact
whatatake is an independent project. Email privacy@whatatake.com about anything on this page.