Privacy without riddles
Ask people directly, collect less than we could, and never pretend a lawnmower is a reliable sexuality detector.
Identity and passwords
Clerk provides account registration, Google, Facebook and LinkedIn sign-in, email verification, password recovery and session security. He Ara Angitū does not receive or store your password.
Required account information
An account requires a verified email address. Clerk may process technical security information needed to prevent fraud, protect sessions and deliver verification or recovery messages.
Optional profile and five-question survey
You may provide a display name, connection to the issue, broad age range, broad region, priorities and current view of the proposal. Every demographic question includes a “Prefer not to say” option. These answers are not required to read the site or challenge the proposal.
We will not infer sexuality, family structure, ethnicity, disability, income, class or age from typing speed, device type, social login choice, browsing patterns or proxy questions.
Separate consent
Newsletter preferences, aggregated research, account-linked analytics and future supporter-wall display are separate choices. Agreeing to one does not silently agree to the others.
Public contributions
Feedback may be published under a chosen display name or as Anonymous. A trusted backend may retain the submitting account identifier privately for moderation, duplicate-vote prevention and abuse investigation.
Location and analytics
Public reporting should use broad country or New Zealand regional totals. Raw IP addresses and precise movement histories should not be retained as audience profiles. Analytics must not contain email addresses, names, contribution text or private uploaded material.
Young people
Because this project concerns secondary students, data collection must use stronger defaults, plain explanations, minimal retention and no automated adverse decisions.
Access, correction and deletion
Account holders should be able to correct their details, manage sign-in methods, change email preferences and request deletion or export. Backend account-deletion and data-export workflows remain a required go-live control before large-scale promotion.
Service status
Clerk authentication is being connected now. Shared feedback, cross-visitor analytics, bulk email and the full administrator data pipeline are not live until the Cloudflare backend verifies Clerk tokens and passes acceptance testing.