Join with a codeGuideBallotsDataToolsBlog

Privacy policy

Envelope collects almost nothing. There are no accounts and no passwords. Players never need an email: a display name is all it takes to join. The person who starts a party gives one email address, and we use it for exactly three things about that party: the invite code, a recovery link in case they lose their device, and the final results. We do not sell data. There is essentially no data to sell.

Updated September 2026

What we store

  • An anonymous session token in your browser, so you stay in your pool.
  • The display name and emoji you pick: call yourself anything (within reason).
  • Your ballot picks and pool memberships, so leaderboards work.
  • Local browser storage for tool preferences, like saved printable-ballot picks.
  • The party host’s email address, with a record of when it was given and what for: the invite-code receipt, a recovery link, a reminder shortly before ballots lock, and the results recap for their party. Announcements about future ceremonies go only to hosts who tick a separate box. Every email we send carries a one-click unsubscribe that stops all of it, and you can ask us to delete the address entirely via the contact page.
  • Optionally, a player’s email address if they ask for the results recap from their party page. Same rules, same unsubscribe.
  • Only if you opt in on a show page: your email address against one ceremony, used solely to send a single “nominees are out” reminder. We never share it, and you can ask us to delete it anytime via the contact page.

What we don’t

No required emails, no phone numbers, no real names, no contact lists, no location tracking, no ad pixels or ad targeting. If a data broker ever came knocking, the entire haul would be “someone called PopcornGoblin picked the wrong drama series.”

Analytics

We use two analytics tools, and here’s exactly what each one does:

  • Vercel Analytics is cookieless: it counts page views and product events (like “a pool was created”) in aggregate, without setting tracking cookies or building profiles of individual visitors.
  • Google Analytics 4 does set cookies: that’s how it tells a returning visitor from a new one. We use it to understand the same things in aggregate: which pages get read, how many pools get created, how many ballots get sealed. We use it for product analytics only, not advertising, and we don’t feed it names, emails, or your picks.

We honor Do Not Track: if your browser sends the DNT signal, Google Analytics never loads and no product events are sent, from either tool. You can also block Google Analytics everywhere with Google’s own opt-out browser add-on.

Selling data

We don’t sell, rent, or trade any of it. Full stop.

Questions

This policy may be updated as the product evolves; the date above reflects the latest revision. Questions or deletion requests? Reach out via the contact page.