Privacy Policy

1. Architectural Commitment: Privacy by Design & Zero-Transmission

VoteYourPay (“we,” “us,” or “our”) operates an international econometric and civic-education platform providing indicative take-home salary and tax modeling across multiple global electorates.

Our engineering architecture is built on the core principle of Data Minimisation (Art. 5(1)(c) GDPR). You may explore scenarios and utilize all interactive calculation modules without registering an account, providing identifying credentials, or transmitting personal financial records. All wage, deduction, regional modifier, and political platform computations execute transiently within your local client-side browser environment. Your computational parameters are never transmitted to, ingested by, or archived on our backend infrastructure.

This Privacy Policy sets forth our practices regarding the minimal technical metadata processed during your visit, our statutory legal bases under the EU General Data Protection Regulation (GDPR), the UK GDPR, the German Telecommunications-Digital-Services Data Protection Act (TDDDG), the California Consumer Privacy Act as amended by the CPRA (CCPA/CPRA), Brazil’s LGPD, Canada’s PIPEDA, and applicable global privacy statutes.

2. Data Controller and Privacy Governance

The Data Controller pursuant to Article 4(7) of the GDPR for all operations conducted on the Platform is:

VoteYourPay Platform Governance
Operated by: Independent Analytics Infrastructure
Contact & Regulatory Desk: contact@voteyourpay.com
Official Domain: https://www.voteyourpay.com/

For all inquiries regarding this Policy, statutory access requests, or the exercise of your data protection rights, please contact our designated Privacy Governance Desk at contact@voteyourpay.com with the subject line “Data Protection Request”. In accordance with statutory requirements (Art. 12(3) GDPR), all verified requests are handled without undue delay and within one calendar month.

3. Categories of Data and Processing Architecture

3.1. Simulator Parameters (Strictly Non-Transmitted / Client-Side)

• Processed Data: Gross annual/monthly salary values, selected jurisdiction, sub-national administrative region, taxation brackets, and political scenario selections.
• Architecture: Calculations are evaluated solely in-memory within your device’s browser sandbox via client-side execution. No payload containing these variables is transmitted across our network.
• Optional Persistence: If you actively toggle the interface setting to retain your preferences across sessions, these variables are stored locally within your browser’s Local Storage. This data remains entirely within your client device; we possess no technical means to access, query, or recover it. You may purge this data at any time via your browser settings.
• Special Category Data Disclaimer: VoteYourPay does not record, infer, or track political opinions or ideological profiles. Interactive electoral selections are processed as temporary computational coefficients on your device and are never linked to personal identifiers.

3.2. Server Log Files and Infrastructure Security

When accessing the Platform, standard technical telemetry is transmitted by your browser and processed by our infrastructure and Content Delivery Network (CDN) providers:

• Internet Protocol (IP) address (anonymized or truncated where technically standard);
• Date, time, and duration of access;
• Specific uniform resource locator (URL) requested and HTTP response code;
• Browser user-agent (operating system, browser family, viewport classification);
• Transferred data volume and referring domain (Referrer URL).

These logs are evaluated strictly to maintain network resilience, perform load balancing, mitigate distributed denial-of-service (DDoS) threats, and ensure operational availability. Log telemetry is never combined with disparate datasets or utilized for individual tracking or user profiling.

3.3. Direct Communications

If you initiate correspondence via our contact channels or official email, we process your email address, your name or pseudonym, and the content of your message. This data is utilized exclusively to manage, respond to, and document your inquiry. We do not incorporate correspondence data into promotional mailing lists or commercialize contact records.

4. Legal Bases for Processing (GDPR & TDDDG)

Where personal data or device storage operations occur, our processing activities are grounded in the following statutory frameworks:

5. Third-Party Monetization and Advertising Framework

To maintain open, unrestricted public access to our educational tools, the Platform integrates monetization services provided by authorized programmatic advertising partners and third-party monetization networks, operating as independent data controllers where applicable.

5.1. Consent and Dual-Controller Status

• For personalized advertising, authorized programmatic advertising partners operate as an independent data controller. In accordance with Article 6(1)(a) GDPR and Section 25(1) TDDDG, non-essential cookies and device identifiers are deployed only after you grant explicit consent via our IAB TCF v2.2-compliant Consent Management Platform (CMP), interoperating with consent mode signals.
• If consent is withheld or revoked, ad units default to non-personalized delivery where supported, relying strictly on broad contextual parameters (such as general page topic and coarse regional routing) rather than individual browsing profiles.
• Refusing advertising consent has zero impact on your ability to use the full functionality of the simulator.

5.2. Technical Scope of Advertising Processing

Where consent is granted, authorized programmatic advertising partners may process mobile advertising identifiers, standard programmatic advertising identifiers, IP addresses, and interaction signals to evaluate campaign reach, prevent fraudulent impressions, and deliver interest-based creative assets. For granular disclosures on partner data handling, please refer to the privacy documentation of the respective advertising partner.

5.3. Revocation and Consent Signals

You may withdraw or calibrate your advertising preferences at any time by:

1. Re-accessing our Consent Management banner or utilizing the tools outlined in our Cookie Policy;
2. Configuring your advertising personalisation settings via your authorized advertising partner's privacy controls and your browser settings;
3. Activating recognized browser privacy signals, including the Global Privacy Control (GPC) and Do Not Track (DNT), which our architecture recognizes as a preference against personalized cross-site tracking.

6. Content Delivery and Edge Infrastructure

Static visual assets, compiled stylesheets, and aggregation feeds are served through distributed Content Delivery Networks to optimize network latency and safeguard infrastructure against volumetric anomalies. CDN nodes process connection-level IP requests strictly under Article 6(1)(f) GDPR to fulfill your browser’s direct retrieval requests. We do not deploy third-party script assets that execute user profiling or behavioral biometric analysis.

7. International Data Transfers

Standard Platform computations occur locally or on hosting infrastructure maintained within the European Union / European Economic Area. To the extent that third-party infrastructure integrations (such as programmatic advertising services or cross-border communication routing) involve data transmission to third countries — specifically the United States — such transfers are governed by appropriate statutory safeguards under Chapter V of the GDPR:

• Participation in the EU-U.S. Data Privacy Framework (DPF), the UK Extension, and the Swiss-U.S. DPF for certified commercial entities;
• The execution of European Commission Standard Contractual Clauses (SCCs) pursuant to Commission Implementing Decision (EU) 2021/914;
• Where applicable, explicit consent granted pursuant to Article 49(1)(a) GDPR.

8. Data Retention and Deletion Architecture

• Connection & Security Logs: Transient access telemetry is automatically purged or anonymized within a maximum rolling window of 30 days, unless an active security incident warrants temporary preservation for forensic or evidentiary purposes under Art. 6(1)(f) GDPR.
• Communications: Direct support correspondence is retained only for the duration required to conclude the inquiry, subject to statutory retention obligations under commercial or tax law (typically up to 3 years under German civil code limitations).
• Client-Side Cache: Local Storage items remain resident on your physical machine until explicitly cleared by you through your browser’s cache management utilities.
• Consent Records: Audit trails establishing valid consent capture are securely maintained for the duration of statutory accountability requirements under Article 7(1) GDPR.

9. Your Statutory Data Protection Rights

9.1. Rights under GDPR and UK GDPR

Subject to statutory conditions, you possess the following rights regarding personal data we control:

• Right of Access (Art. 15 GDPR): Request formal confirmation and copies of personal data processed.
• Right to Rectification (Art. 16 GDPR): Correct inaccurate or incomplete records.
• Right to Erasure (Art. 17 GDPR): Request permanent deletion (“Right to be Forgotten”).
• Right to Restriction (Art. 18 GDPR): Restrict processing under contested circumstances.
• Right to Data Portability (Art. 20 GDPR): Receive your data in a structured, commonly used, machine-readable format.
• Right to Object (Art. 21 GDPR): Object at any time to processing grounded in Article 6(1)(f) GDPR.
• Right to Withdraw Consent (Art. 7(3) GDPR): Revoke previously granted consent with prospective effect.
• Supervisory Oversight: You have the right to lodge a formal complaint with a competent Data Protection Supervisory Authority (Art. 77 GDPR), specifically in the Member State of your habitual residence, place of work, or the place of the alleged infringement.

9.2. US Multi-State Disclosures (CCPA/CPRA, VCDPA, CPA, and Others)

For residents of California, Virginia, Colorado, Texas, and other applicable states:

• We do not sell personal information in exchange for monetary consideration.
• To the extent the deployment of cross-context behavioral advertising cookies constitutes a “sale” or “share” under applicable state definitions, you may exercise your opt-out rights via our Cookie Consent tools or by enabling the Global Privacy Control (GPC).
• You retain the statutory right to request access, correction, and deletion of personal records without facing discriminatory service degradation.

9.3. Rights under Brazilian LGPD and Canadian PIPEDA

Users residing in Brazil (Arts. 18–19 LGPD) and Canada (PIPEDA Principle 9) may submit statutory confirmation, access, or erasure requests directly to our governance desk at contact@voteyourpay.com.

10. Automated Decision-Making and Profiling

VoteYourPay does not employ automated decision-making systems or profiling mechanisms producing legal or similarly significant effects within the scope of Article 22 of the GDPR. Simulation algorithms are static, deterministic models designed for exploratory visualization and do not evaluate, score, or predict your individual conduct.

11. Protection of Minors

The Platform is an educational and analytical tool designed for a general audience and does not knowingly solicit or collect personal information from individuals under the age of 16 (or the relevant age of digital majority in your jurisdiction). If you become aware that a minor has submitted personal records to our contact desk, please notify us immediately; we will purge such records without delay.

12. Policy Revisions and Formal Contact

We periodically update this Privacy Policy to ensure alignment with structural infrastructure enhancements, third-party integrations, and legislative amendments. The authoritative version is permanently published at https://www.voteyourpay.com/privacy-policy with its corresponding Effective Date.

For legal communications, supervisory coordination, or data subject rights requests, please direct all formal inquiries to:

VoteYourPay Privacy Governance Desk
Email: contact@voteyourpay.com
Web: https://www.voteyourpay.com/contact