Privacy policy

Applies to this website and its signature system.

What we collect

• Every signature: a random device credential stored in an HttpOnly cookie, and keyed one-way hashes (HMAC) of that credential, your IP address and your browser user-agent. We never store your raw IP address.
• Your name, if you choose to give one: it is shown publicly in the live feed exactly as you typed it. Leave the field empty to sign anonymously. Names are not verified.
• Bot protection: simple checks on our own server. If Cloudflare Turnstile is enabled, Cloudflare processes data to tell humans from bots under its own privacy policy.

Why

To count each signature once, prevent repeated or automated signing, show a public feed of signatures, and let moderators remove abuse.

What's public

The public feed shows only the name you typed (or “Anonymous #042” if you left it empty) and the time. Aggregate counts are public.

Limits of anonymous signing

Signatures are protected by bot checks, rate limits and per-device and per-network limits, but they cannot be guaranteed to represent unique humans, and names are not verified.

Storage & retention

Data is stored in a PostgreSQL database (Neon, via Vercel). Signature records are kept for the duration of the campaign and its public record. Rate-limit counters are deleted after two days.

Your choices

You can sign anonymously. To request removal of your signature, contact the organisers through the movement's official channels with enough detail to identify it (for example the name you signed with).

Affiliation

This is an independent community movement. It is not affiliated with Pump.fun or Robinhood.