Privacy Policy

EuroVoxAwards.com ("EuroVox", "we", "us") is an independent, fan-run awards project for the Eurovision Song Contest. We are the data controller for any personal data processed through this site under the EU General Data Protection Regulation (GDPR).

Contact: privacy@eurovoxawards.com

When you sign in and vote, we store the following:

• Email address — provided by Google or Apple when you sign in, used to identify your account. Apple users may choose to share a private relay address.
• Account ID — a random UUID created when you first sign in.
• Display name — taken from your Google or Apple profile (optional, never shown publicly).
• Your votes — which category, which candidate, and the timestamp.
• 2-letter country code — detected from the cf-ipcountry header set by Cloudflare at our network edge. We never store your IP address.

We do not collect: IP addresses, device fingerprints, browser history, location beyond country, analytics, or any third-party tracking data.

• Consent (Art. 6(1)(a) GDPR) — for recording your vote and country.
• Legitimate interest (Art. 6(1)(f) GDPR) — for detecting voting fraud (e.g. duplicate accounts) and publishing aggregate transparency data.
• Contract (Art. 6(1)(b) GDPR) — for providing the sign-in service you requested.

• To count your vote once per category.
• To publish aggregate, anonymised results (totals, percentages, country breakdowns — never individual votes tied to identifiable users).
• To publish the full transparency data report on 7 June 2026 (aggregate only).

We use the following processors:

• Google — OAuth sign-in. Google's privacy policy applies to data they receive.
• Apple — OAuth sign-in (Sign in with Apple). Apple's privacy policy applies to data they receive.
• Lovable Cloud / Supabase — database and authentication hosting (EU region).
• Cloudflare — edge network and DDoS protection.

We do not sell, rent, or share your personal data with advertisers or any third party for marketing.

We use exactly one storage mechanism: a session token stored in your browser's localStorage to keep you signed in. This is strictly necessary for the service you requested and is exempt from cookie consent requirements under the ePrivacy Directive.

We use no analytics cookies, no advertising cookies, and no third-party trackers. That is why you don't see a cookie banner.

• Votes: retained until the EuroVox 2027 announcement, then deleted at the row level (aggregate results remain published).
• Account: retained until you request deletion or until 24 months of inactivity.

You have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Have your data erased ("right to be forgotten").
• Export your data in a portable format.
• Withdraw your consent at any time.
• Lodge a complaint with your national data protection authority.

To exercise any of these rights, email privacy@eurovoxawards.com. We respond within 30 days.

If we materially change how we handle data, we'll update this page and the "last updated" date. Significant changes will be announced on the homepage.