Privacy notice

ElectioneeriNG decides what information this service collects and why, and is responsible for it.

• Privacy questions and requests about your information: privacy@electioneeri.ng
• General help and account problems: support@electioneeri.ng
• Security issues and vulnerability reports: security@electioneeri.ng

Reading the site. Nothing about you. No account, no personal information, and no third-party advertising or analytics trackers. We do not build an advertising profile and we do not sell data.

Corrections, submissions and feedback. What you wrote, the sources you cited, and which record or page it relates to. A contact email is optional; if you give one it is used to follow up and is visible only to reviewers, never on a public page.

Accounts. A display name, an email address, and your password stored as a hash rather than as the password itself. Administrative accounts additionally use two-factor authentication, whose shared secret is encrypted where it is stored. Password resets store a hashed form of the reset token; the usable token exists only in the link sent to your email address.

Comments and reactions. What you post, and the display name on your account. Comments are public once approved.

Abuse prevention. Submissions are stored alongside a one-way hash of the network address and browser user-agent the request came from. The hash lets us recognise repeated abuse from one origin; the raw address and user-agent are not stored in the submission record.

Candidates and officeholders. Information about people seeking or holding public office, drawn from published sources. This is civic information about a public role, not private life: we do not collect home addresses, private phone numbers, identity documents or family details unrelated to a candidacy. Contact details shown are ones the candidate published for public contact.

• Publishing civic information. To maintain an accurate, sourced public record of who is contesting and who holds office, in the public interest.
• Moderation. To review submissions before publication, check sources and identity, resolve disputes, and keep a record of who decided what and why. Without this the service could be used to publish a false claim about a real person.
• Authentication. To let you sign in, keep your session secure, and confirm it is you before a sensitive action.
• Correspondence. To reply to a submission, a support request or a privacy request.
• Security and abuse prevention. To detect and stop automated abuse, credential attacks and coordinated attempts to corrupt the record, and to investigate incidents.
• Running the service. To keep it available and diagnose faults.

We do not use your information to profile you politically, and we do not ask about your own views or voting intention.

A person reads what you send. Reviewers see the submission, the sources and any contact email you provided, and they record a decision against it. Nothing is published automatically.

Moderation decisions are kept as part of the record. That history is what makes a published claim auditable later, so it is retained even after the submission itself has been actioned. How moderation works describes the process in full.

This service sets no advertising, analytics or tracking cookies, which is why you are not asked to accept any. The only cookies it sets are strictly necessary:

• a session cookie, so you stay signed in between pages;
• a separate administrative session cookie for accounts with editorial access;
• a cross-site request forgery token, so a form you submit cannot be forged by another site.

All three are restricted to this site, are not readable by JavaScript, and are sent only over an encrypted connection. Signing out clears them. If you never sign in, none of them is set.

Candidate records, the evidence behind them, moderation history, audit logs and correction history are retained permanently for public-interest archival purposes. They are the civic archive this service exists to keep, and they document elections that people will still need to understand years afterwards.

The public submission form uses a third-party bot-protection challenge. Completing it sends a challenge token and your network address to that provider so it can confirm the request is not automated.

Password-reset and other transactional emails are delivered through an email provider, which necessarily receives the destination address.

The application and its database run on hosted infrastructure, so the hosting provider processes data in the ordinary course of running the service.

These providers act on our instructions for these purposes. We do not sell personal information and we do not share it for advertising.

The service runs on hosted infrastructure outside Nigeria. Its servers and database are currently located in the European Union (Frankfurt), and the bot-protection and email providers described above operate internationally, so information you send may be processed outside Nigeria.

The same protections described in this notice apply wherever the processing happens, and we use providers that commit contractually to protecting the data they handle for us. If the hosting location changes materially, this section will be updated to say so.

Traffic is encrypted in transit. Passwords are stored as hashes and never in a readable form. Two-factor secrets for administrative accounts are encrypted at rest. Reset tokens are stored hashed. Editorial actions are permission-gated and audit-logged, so a change to a published record can always be traced to an account and a time.

No system is perfectly secure. If you find a vulnerability, please report it to security@electioneeri.ng rather than posting it publicly, and give us a reasonable chance to fix it.

Email privacy@electioneeri.ng. Say which right you are exercising and what specifically it concerns. A request that names the account or the record can be acted on; one that does not usually cannot.

We may need to confirm you are who you say you are before acting, particularly for access or deletion, because acting on an unverified request is itself a way to leak someone else’s information. We will ask for no more than we need to be sure.

We aim to respond within 30 days. If a request is complex and will take longer, we will tell you before that point rather than let it run silently.

Requests are free. If a request is repetitive or clearly excessive we will explain why before doing anything about it.

One limit worth stating plainly: we will not remove an accurate, sourced record of a public candidacy or of a public office on request. That archive is held in the public interest. If you believe such a record is wrong, tell us what is wrong and we will correct it.

When this notice changes materially we will update it here rather than change practice quietly. If you want something in it clarified before you use the service, ask at privacy@electioneeri.ng.