Last updated: October 23, 2026
NetizenSays ("we") is a site where other people help you make everyday choices. It is in public beta and run from Malaysia. This policy explains what we collect, how we use it, who can see it and how you can manage it. We handle your data under Malaysia's Personal Data Protection Act 2010 (PDPA).
What we collect
- Login details: your email. If you sign in with Google, Google shares your name and email with us. We never get your Google password, and we don't read your Gmail, contacts or other Google data.
- Profile: username, display name, avatar, bio, interests and the visibility options you choose in settings.
- What you post: questions, options, images, comments and follow-up reports, plus your votes, likes, saves and follows.
- Feedback: what you send through "Feedback / report a bug", any screenshot and the contact you leave, plus the page you were on, your browser and device model, screen size and language. Only our team sees it, to find problems and reply to you.
- Technical data: to stop spam and bots we process your IP address and bot-check results. Your browser keeps a few necessary cookies and local data to keep you signed in, remember your language and hold drafts.
How we use it
- To run the service: sign you in, let you post, vote and comment, reveal results after the deadline and show your profile.
- To protect the community: rate limits, blocking bots and abuse, handling reports.
- To contact you: login emails and the notifications you turn on.
- We don't sell your data, show ads or track you across other sites.
Who can see what
- Your questions, options, images, comments, follow-up reports and profile are public. Anyone can see and share them.
- Which option you voted for is not public. Others only see the total votes for each option. The one exception: when you comment on a post, your comment shows which option you voted for.
- Your email is never shown on the site.
Services that help us run
- Supabase: database, sign-in and image storage.
- Vercel: website hosting, plus cookie-free visit counts and loading-speed stats (totals only; they don't identify you).
- Cloudflare Turnstile: bot checks.
- Google: if you choose to sign in with Google.
- Google Workspace: sending login emails from noreply@netizensays.com.
- GitHub: storing daily database backups (kept 14 days, visible only to us).
- These providers only process your data to provide these functions. Your data may be stored outside Malaysia.
How long we keep it and how to delete it
- We keep your data until you delete your account. When you do, your profile, avatar, posts, comments, follows and saves are deleted. Your votes stay but are no longer linked to anyone, so other people's results don't suddenly change.
- Feedback you sent is kept to fix problems, but no longer linked to your account, and any screenshot is deleted.
- Account deletion on the site is still being built. Until then, email us and we'll delete your account for you.
- We regularly clear data from anonymous visitors who only voted and never signed in.
Your rights
- You can view and change your profile at any time in Edit profile.
- You can ask us for a copy of your personal data, ask us to correct or delete it, or withdraw your consent. Just email us.
Children
- This site is not for anyone under 13. If you find that a child under 13 has given us their data, contact us and we'll delete it.
Changes
- We may update this policy. If we make a major change, we'll let you know on the site.
Questions? Email admin@netizensays.com