3stones
Privacy policy
Last updated: 6 November 2026. This policy covers the 3stones app and the 3stones websites.
Controller
Email: me@3stones.xyz
Login
You log in with your Google account, and on the iPhone also with Apple. 3stones stores neither the email address nor the name of that account. From the account ID, the server calculates its own user ID with a secret key and stores only that user ID.
Your profile
Country and year of birth are required. The country decides which questions you see. The year of birth checks the minimum age and gives your age group. Gender, type of settlement, education and economic situation are optional. They are used only for the combined breakdowns of the results.
Your vote
3stones stores two separate things that no shared key connects:
- A participation note records that your user ID voted on a question. It does not contain your answer.
- The ballot contains the answer, a check value, country, age group, your optional profile details and the time rounded to the hour. It does not contain a user ID.
Your answers can reveal your political opinion. For that reason the ballot has no user ID, and the breakdowns merge groups with fewer than 10 votes.
From the participation notes, 3stones calculates its own totals, for example how many voters of one round vote again in the next. These totals contain no user ID.
The secret of your certificate is created on your device and stays there. The server knows only the check value calculated from it.
Submitted questions and reports
3stones stores your submitted questions, your stones on candidates and your reports together with your user ID. You do not appear publicly with them. Moderators see the text of a question to check it against fixed rules.
Device and technology
- Session: the server stores a hash of your login token for at most 180 days.
- Push notifications: if you allow them, the server stores your push token and your language.
- Device proof: on the iPhone, the server stores a device key to limit abuse.
- IP address: the server uses it for rate limits. The database does not store it.
The app contains no advertising and no tracking or analytics SDK.
Public results
After each round, 3stones publishes the combined results and, per question, a list of check values and answers, also in the public archive github.com/hour26/3stones-results. A hash of the results goes to the OpenTimestamps servers and is anchored in the Bitcoin blockchain. This data contains no user ID and cannot be withdrawn.
Recipients
- Cloudflare runs the servers, the database and the file storage. The database and the file storage are in the EU. Cloudflare can process requests at locations outside the EU.
- Expo (USA) forwards push notifications to your device through Apple and Google.
- Google and Apple handle the login. When a question is translated, the text stays on the device.
3stones does not sell data.
Legal bases
Running the app is based on Art. 6(1)(b) GDPR. Optional profile details and push notifications are based on your consent under Art. 6(1)(a) GDPR, which you can withdraw at any time in your profile. Protection against abuse is based on Art. 6(1)(f) GDPR.
Delete your account
Open your profile in the app and choose to delete your account. Without the app, you can request deletion by email to me@3stones.xyz.
- Deleted at once: profile, sessions, push tokens, stones on candidates, reports and roles.
- Kept until the end of the running round: participation notes and the link to the device key, so that nobody can vote twice by deleting the account.
- Submitted questions stay without a user ID. Cast ballots stay in the result, because they contain no person.
Your rights
You have the right to access, rectification, erasure, restriction, data portability and objection. To use them, write to the email address above. You can also complain to a data protection supervisory authority.
Minimum age
3stones is for people aged 16 and over. You may take part from the year in which you turn 17.