What we collect
When you sign, we collect your name, email, country, optional comment, consent record and security signals needed to prevent abuse. Email and full-name values are encrypted at rest. One-way hashes support duplicate detection without exposing raw values.
How information is used
We use this information to verify and count signatures, operate the campaign, prevent fraud and satisfy legal obligations. Public activity shows only a first name and country. We never publish email addresses, IP addresses or device identifiers.
Retention and your rights
Records are retained only as needed for campaign integrity and legal obligations. You may request access, correction or deletion through the campaign operator. Deleted signatures are removed from verified totals. Where law applies, you may object, restrict processing or lodge a complaint.
Processors and security
Infrastructure, email, CAPTCHA and monitoring providers process limited data under appropriate safeguards. We use encryption, access controls, audit logs, rate limits and operational monitoring. No online system can guarantee absolute security.