Privacy policy
Pseudonymous by design.
PaperVote accounts need only a random 20-digit recovery number—no name, email address or social account.
Account data
PaperVote converts each 20-digit recovery number into a keyed one-way hash and never stores the readable number. It stores that hash, the final four digits, account creation time, sessions, recommendations, reactions, credits, referrals, sharing rewards and any profile text you choose to add.
One account per browser
PaperVote places a random, HTTP-only device token in your browser and stores only its hash. While that site data remains, asking for another number signs the browser back into its existing account instead. Clearing site data, using private browsing or changing browser profiles bypasses this limit; a website cannot identify a physical machine anonymously.
Optional ORCID sign-in
If you use ORCID, PaperVote immediately converts the authenticated ORCID iD into a keyed one-way hash. It does not store the readable ORCID iD, access token, email address, name or ORCID profile.
Public nickname and rankings
Your bio is private. If you add a public nickname, that nickname and your credit and papers-reviewed totals appear in the public contribution rankings. Removing the nickname removes the account from those rankings.
Signed-in session
After account creation or sign-in, PaperVote keeps the session in a secure, HTTP-only cookie. ORCID credentials are not used as the session cookie.
Remembered account
PaperVote remembers at most one readable recovery number in local browser storage. Anyone with access to the browser may be able to use it. Remove it with × on the sign-in page when using a shared device.
Infrastructure and search
PaperVote runs on Cloudflare Workers and D1. Cloudflare Turnstile processes technical signals during ORCID sign-in to deter automated registrations. Searches may request metadata from PubMed, Europe PMC, Crossref and DataCite. Those providers may receive ordinary technical request data and apply their own policies.
Referral links
A referral link contains a random code associated with the referring account. When a new account registers through it, PaperVote records the two anonymous account identifiers so both balances can receive the stated reward. The link contains no readable recovery number.
Delete your data
While signed in, open your Dashboard and use “Delete my account.” This permanently removes the account, its sessions, identity link, recommendations, reactions, credit wallet and referral records. A permanently banned identity hash is retained so the ban cannot be bypassed by deleting and recreating an account.