Utah Says
Privacy policy
Updated October 5, 2026
Utah Says runs community polls about Utah. You can vote without creating an account. This policy describes how we handle information when you use utahsays.com.
Information we use
- Voting and visits. We use a random browser identifier to remember your votes, prevent duplicates and measure visits. Our application database stores hashed identifiers and hashed IP addresses, vote choices, timestamps and security outcomes. It may also store country and network identifiers for bot protection. These identifiers are pseudonymous; they are not your name.
- Accounts and contributions. If you sign in, we store your email, account and profile information, sign-in records, questions, suggestions, comments and reports. Your selected nickname or display name can appear with public contributions. Your account email is not shown on your public profile.
- Browser storage. Cookies remember your voter identity, sign-in session, security verification and referral links. A copy of your voter token is kept in local storage to prevent duplicate voting after cookies are cleared. Referral cookies expire after seven days; voter cookies can last one year and sign-in sessions up to 60 days. Local storage remains until you clear it.
- Messages. If you contact us, we use the information you send to handle your request. Please do not send passwords, sign-in codes or unnecessary sensitive information.
Hosting, moderation and analytics
Cloudflare hosts the site, database and media, provides Turnstile bot protection, and processes content submitted for automated moderation through Workers AI. Hosting and security providers necessarily process connection information, including IP addresses. Our database hashing does not mean these providers never receive an IP address. Sign-in emails are delivered through our configured email provider, currently Resend.
We use Google Analytics to measure page visits and interactions, and to understand which campaign links bring visitors. Google may use cookies and process browser, device, activity and approximate location information. We do not intentionally send account email addresses, voter tokens or comment text as analytics event parameters. Browser privacy controls and blockers can limit this collection; analytics reports may be incomplete.
Read Cloudflare's Turnstile privacy notice, Google's privacy policy and Resend's privacy policy for their practices.
Public polls and social accounts
Poll questions, choices, public contributions and aggregate results can be seen and shared by other people. We may share these public questions and aggregate results through Utah Says social accounts. Campaign links can associate a hashed browser identifier with a campaign visit and a new valid vote for seven days. These records are separate from user-created shares. Social platforms apply their own privacy policies. A comment or reaction on a social platform does not cast a vote on this site.
Retention and your choices
We keep voting records and published contributions to maintain polls, rankings and integrity, and account and security records to operate the service. The application does not currently apply a fixed automatic deletion schedule to all these records. Sign-in codes expire after 15 minutes, but expiration does not automatically delete the record. Provider logs and analytics have separate retention settings.
You can edit your profile, delete your own comments, sign out, and clear site cookies and local storage in your browser. Clearing browser storage does not delete database records. For access, correction or deletion requests, email contact@utahsays.com. We may ask for enough information to verify a request and identify its records. Some security records may need to be retained to protect the service or meet applicable obligations.
Questions about this policy can be sent to the same address. We will update this page when our practices change.