Privacy

How your answers are stored, and what is never stored

  • Stored: your answers, the language you answered in, the kind of link you came from (reddit, youtube, instagram, facebook, x, another link, or none), the questionnaire version, when you started and submitted, a random receipt code, and, only if it applies, one word saying the answer updates an earlier one or came from a browser that had already answered this month.
  • Never stored: your name, email, phone number, account, IP address or a device identifier. Your governorate is stored only if you choose to answer the last question, which is optional. Cloudflare, which protects the site, runs a check in your browser and sets a security cookie for up to a year; it holds none of your answers.
  • Kept on this device and never sent to us: the month you last answered, and your unfinished answers until you submit or clear them, or until you reopen the survey more than 24 hours later. If you never return they stay until you clear this site's data in your browser.
  • Your receipt code deletes your answers until the end of the month you answered in. If you lose it, nobody can delete them, not even us: nothing stored with them links them to you.

What is stored, and what is not

When you submit, one row is written. It holds your answers, the language you answered in, the kind of link you arrived through (reddit, youtube, instagram, facebook, x, another link, or none, never your account or the link itself), the questionnaire version you saw, the time you started and the time you submitted, a random receipt code, and, only if it applies, one word saying that the answer updates an earlier one or came from a browser that had already answered this month. That is all. The kind of link is never published for any answer. What is published from it is the share of answers that arrived through a shared link, the share that arrived through the single most-used kind of link, and what the index would be without it.

The questionnaire asks nothing about who you are: no age, no gender, no address. Its last question, which governorate you live in, is optional, and you can skip it or answer "prefer not to answer". If you answer it, only your region is ever published, and never for a group of fewer than 20 people.

No name, email address, phone number, account, IP address, browser fingerprint or device identifier is stored with your answers, and there is no field that could hold one. Your governorate is stored only if you choose to answer the last question, which is optional. The site itself sets no cookies and loads nothing from other companies. Cloudflare, which hosts the site, is the one exception. To protect the site from automated traffic, it runs a short check in your browser on every visit and sets a security cookie that lasts up to a year; it may also show a check to traffic it judges automated, and its human check is switched on only during an attack and says so on the page. The cookie holds none of your answers, and we do not read it.

Two things are kept in this browser instead of with your answers: the month you last answered, and your unfinished answers. Both stay on this device. The month itself is never sent; if this browser already answered this month, your next answer carries the one-word mark described above, so the page can show how many answers may come from the same person. Unfinished answers are kept until you submit or clear them with the button in the survey. If you open the survey again more than 24 hours after you last touched it, they are removed then. If you never come back, they stay on this device until you clear this site's data in your browser, so on a shared device press the clear button before you leave. They are never sent to anyone until you submit. The month you last answered is removed when you withdraw your answers from this browser.

Two things touch your connection without being stored with your answers. To stop one machine from flooding the survey, the server counts submissions per address using a fingerprint of the address, salted so that it changes every day, and deletes that fingerprint once its hour has passed and the next answer arrives; the address itself is never written down. The fingerprint is kept in a separate database that Cloudflare currently runs in eastern Europe, without the guarantee of staying inside the European Union that the database holding your answers has. And the site runs on Cloudflare, which, like any host, sees every connection and keeps its own security records. The server that receives your answers keeps no log of the requests it receives.

A third thing is outside our reach. As with any website, your internet provider and anyone watching your network can see that you visited this site. The site cannot prevent that. A VPN or Tor Browser hides the visit from your provider, and the answers you send are not tied to you either way.

Your receipt code is the only way to delete your answers. It works until the end of the month in which you answered. If you lose it, your answers can no longer be deleted, by you or by us, because nothing stored with them links them to you. The index is published once a month, and a month's figure never changes after it closes, so that month's answers are fixed from then on. Any data released later has regions instead of governorates, no date finer than the month and no receipt codes.