Privacy Policy and Terms of Use
Privacy Policy
This policy explains how Referandom handles your personal information when you use the site. It's here to inform you; you don't need to accept it.
Who We Are
- Operator: CDR Technology Foundation, Inc., a U.S.-based 501(c)(3) nonprofit
- Email: info@cdr.technology
Information We Collect
- Email AddressUsed to send your sign-in code, or received from Google if you sign in with Google. We don't store the address itself, only a one-way hash and a masked version (e.g. j***@example.com).
- VotesYour Yea, Nay and Skip choices on bills, and when you made them.
- DemographicsOptional, and only with your consent: where you live, gender and age range.
- CommentsThe display name you choose for commenting, your comments, the Helpful marks you give and the comments you report.
- Account PreferencesTopics you follow, your notification preferences and the days you voted (your streak).
- Security DataRandom IDs in the session and device cookies, the browser you signed in with and a one-way hash of your IP address. Your raw IP address is never stored.
- Analytics DataOnly if you allow analytics, through Google Analytics 4: pages you visit, time on site, device and browser, approximate location, ad click IDs (gclid, gbraid, wbraid, utm) and events like voting, signing up and signing in. If you don't allow it, no cookies are set and Google gets only a cookieless, anonymous signal (Google Consent Mode): your visits aren't linked and ad click IDs are removed. Either way, how you voted is never sent.
- EmailsIf you email us, your email address and your message.
Your Votes and Your Account
How you vote on a bill can reveal your political views, so we handle your votes like this:
- Votes you cast without signing in are stored with a random device ID (the rf_cihaz cookie), not your name or email, and are added to the totals.
- When you create an account, you can choose to link your votes to it. You can withdraw that consent anytime in Settings. Your linked votes and demographics are then deleted and removed from the totals, and your account stays open.
- Your individual votes are never shown anywhere, sold or used for ads. The site only shows totals.
How We Use Your Information
| Purpose | Information Used |
|---|---|
| Create your account, send sign-in codes and keep you signed in | Email address (hashed and masked), session cookie, browser info |
| Save your votes with your device ID, show them back to you and count the totals | Votes, device cookie |
| Link your votes to your account, sync them across devices and produce overall demographic statistics, only with your consent | Votes, demographics |
| Publish and moderate comments | Display name, comments, Helpful marks, comment reports |
| Keep the site secure and prevent abuse and fake votes, including rate limits and bot checks | IP address hash, device cookie, IP address and browser signals at sign-in (Cloudflare Turnstile) |
| Measure how the site is used and how ad campaigns perform (Google Analytics 4 and Google Ads conversions), only with your consent | Analytics data, _ga and _gcl cookies |
| Answer your questions and requests | Email address, message |
| Meet legal obligations and protect our rights | Relevant records |
How Long We Keep It
| Record | Kept For |
|---|---|
| Session cookie (rf_oturum) and session record | 90 days from last use; deleted when you sign out |
| Device cookie (rf_cihaz) | 400 days from your last vote |
| Sign-in codes and rate-limit records (including IP hash) | 2 days; a sign-in code is valid for 10 minutes |
| Account, display name, preferences, streak and comments | Until you delete your account |
| Votes and demographics linked to your account | Until you withdraw consent or delete your account |
| Votes stored with a device ID | As long as the site runs, to keep the totals right; once the device cookie is deleted or expires, they can't be linked to your browser |
| Analytics data | Up to 14 months in Google Analytics; _ga cookies up to 2 years |
| Emails | Up to 2 years after your request is resolved |
When a retention period ends, we delete the data or make it anonymous.
Who We Share It With
We don't sell your information. We share it only with the service providers we need to run the site (hosting, security, email and Google for analytics, which gets only a cookieless, anonymous signal unless you allow analytics), and with authorities when the law requires it.
Your Choices
You can ask us to:
- Tell you whether we hold information about you
- Give you a copy of your information
- Explain why we use it and who we share it with
- Correct information that's wrong or incomplete
- Delete your information
- Withdraw the consent you gave, anytime
You can also download your data, delete your account and withdraw your consent in Settings.
How to Reach Us
To make a request, email info@cdr.technology from the email address linked to your account. We'll respond within 30 days, free of charge.
Cookies and Local Storage
| Name | Type | Purpose | Duration |
|---|---|---|---|
| rf_oturum | Essential cookie | Keeps you signed in | 90 days |
| rf_cihaz | Essential cookie | Links your votes to your device and limits fake votes | 400 days |
| rf_google | Essential cookie | Protects Google sign-in while it's in progress | 10 minutes |
| __cf_bm | Essential cookie (Cloudflare) | Detects bot traffic | 30 minutes |
| _ga, _ga_<id> | Analytics cookie (Google Analytics) | Tells visits apart; only if you allow it | 2 years |
| _gcl_* | Ad measurement cookie (Google Ads) | Matches an ad click to an action on the site; only if you allow it | 90 days |
| rf.oylar.v2, rf.seri.v1 | Local storage | Your signed-out votes and streak; also saved on our server | Until you clear it |
| rf.riza.v1 | Local storage | Your analytics choice | Until you clear it |
| rf.duyuru, rf.deste-ipucu.v1, rf.seri-oylama.v1, rf.bugun.* | Local storage | Notices and tips you closed, and display preferences | Until you clear it |
| rf.deste.gecilen, rf.deste.son | Session storage | Cards you skipped and the last deck you opened | Until you close the tab |
You can change your analytics choice anytime in the analytics section on this page. If you turn it off, the _ga and _gcl cookies are deleted and only the cookieless, anonymous signal is sent. Signing in and voting don't work without essential cookies.
Age Requirement
You must be 18 or older to create an account. If we learn that an account belongs to someone under 18, we delete it and its data.
Changes to This Policy
When we update this policy, we change the last updated date and announce important changes on the site before they take effect. If we want to use information you shared with your consent in new ways, we'll ask for your consent again.
Last updated: October 14, 2026
Terms of Use
Section 1: Definitions
In these terms:
- “Referandom” or “the site” means the Referandom website and service
- “You” means anyone who uses the site
- “CDR,” “we” and “us” mean CDR Technology Foundation, Inc.
- “Privacy Policy” means the privacy policy at the top of this page
How to reach CDR:
- Email: info@cdr.technology
Section 2: Who These Terms Are Between
These terms are an agreement between CDR, which runs Referandom, and you, the person using it.
Section 3: What These Terms Cover
These terms set out the conditions for using the site, and your rights and responsibilities. How we handle personal information isn't covered by these terms. It's covered by the Privacy Policy and, where needed, by consent you give separately.
Section 4: Privacy and Personal Information
The Privacy Policy at the top of this page explains what information we collect, why we use it, who we share it with, how long we keep it and what choices you have. It's for your information and isn't part of these terms.
Accepting these terms doesn't mean you consent to us using your personal information. Linking your Yea, Nay and Skip votes and your demographics to your account relies only on consent you give separately. You can create an account and use the site without giving that consent.
Section 5: Your Rights and Responsibilities
- 5.1You must be 18 or older to create an account, and by creating one you confirm that you are. Without an account, you can still vote on cards; those votes aren't tied to your identity.
- 5.2You alone are responsible for anything you add, upload or create on the site, including making sure it's accurate, current and lawful.
- 5.3Content that others provide on the site may be protected by copyright, trademark, patent, trade secret and other laws. Don't copy, change, distribute or store it for other purposes, sell it, use it for advertising or use it without attribution in a way that harms others' rights. To use someone else's content elsewhere, you need their permission, and you're responsible for getting it.
- 5.4You're responsible for the accuracy of the information you give us. To the extent the law allows, you're responsible for losses CDR or others suffer because that information is false or because you break these terms.
- 5.5Follow the law when you use the site. Don't post anything that harms others' personal rights, or that is defamatory, deceptive, pornographic or obscene, or that contains insults, violence, racism, discrimination or other unlawful material. You alone are legally responsible for what you post.
- 5.6Don't use the site for unlawful purposes or in ways that violate public order, others' personal rights or their intellectual property, and don't impersonate any person or organization. Don't spam, spread viruses or malware, keep others from using the site or damage any software, hardware or network. Don't change, convert or translate site content or republish it elsewhere without attribution, and don't try to access any system, data or password you aren't authorized to access.
- 5.7Opinions you share on the site are your own, and you alone are responsible for them. They have nothing to do with CDR. CDR isn't responsible for harm others suffer because of opinions you share, or harm you suffer because of opinions others share.
- 5.8If you break any of these terms, you're personally responsible for the legal consequences. CDR may seek compensation for resulting losses to the extent the law allows.
- 5.9You may not use any trademarks, logos or other marks related to the site without permission.
- 5.10By accepting these terms, you confirm that you've read and understood them. Information about personal data is in the Privacy Policy.
Section 6: Our Rights
- 6.1CDR may change the site's services at any time without notice.
- 6.2CDR doesn't guarantee that all content on the site will always comply with the law. CDR may remove, edit, change or block any content at any time, at its own discretion and without notice. CDR may change the site's content, change or end any service, or delete user information and data at any time.
- 6.3CDR may change or update these terms. Changes are announced on the site before they take effect, and the new version is posted on this page with its effective date. If you don't accept the changes, you can end these terms by deleting your account at any time. If you keep using the site after the effective date, you accept the changes. Changes don't apply retroactively.
- 6.4CDR takes reasonable steps to keep the site free of viruses and other malware, but you should use your own protection too. You're responsible for any errors in your own software and systems and their results. CDR may share information with authorities when the law requires it.
- 6.5The site's software and design belong to CDR and are protected by copyright and other intellectual property laws. You may not use, take or change them without permission.
- 6.6CDR sends you only the emails the service needs, like sign-in codes. Announcements, news and newsletters are sent only if you agree separately, and you can take back that agreement anytime through the link in each email or by emailing CDR.
Section 7: Ending These Terms
These terms stay in effect until you or CDR ends your account. You can delete your account anytime in Settings. Either side may end the account at any time. Each side keeps its rights under the law.
Section 8: Effective Date
These terms take effect when you accept them while creating an account. If you use the site without an account, the terms on using the site apply as soon as you use it.
Accepting these terms or using the site doesn't mean you consent to us using your personal information. That's explained in the Privacy Policy, and where consent is needed, we ask for it separately and it's optional.
Effective date: October 14, 2026
