Privacy Notice

Elenchos (elenchos.live) is an experimental public-discourse and research product based in the EU. We help people compare citizen conversation with official frames, browse public research, and (for Pro subscribers) run authenticated private research.

Contact (GDPR requests and questions): citizen.pulse101@gmail.com · About · Research

The Dashboard, Research Library, and public trackers/topics work without creating an account. Sign-in is not required to read public research.

We do not run advertising cookies or sell personal profiles. Hosting and security logs (e.g. IP at the edge) may exist at the infrastructure layer like any website; we do not build marketing dossiers from them.

Paid Pro / subscription features require authentication via X (Twitter) OAuth and/or Google OAuth (through Supabase Auth). When you sign in we process identity data needed to run your account.

• Stored: Supabase user id; email and/or username from the OAuth provider; subscription status; Stripe customer id; token wallet balance; private research reports tied to your user_id.
• Not stored by Elenchos: card numbers or full payment credentials (handled by Stripe).

Legacy guest commission links (if any remain) are token-based rather than tied to a Pro account identity. Pro authenticated accounts do have identity linked to the subscription and private reports.

Private reports created under a Pro account are associated with your authenticated user_id. Topic/questions text, report content, package or wallet usage, and timestamps are retained so you can access your work while the account (and report retention) remain active.

Treat private report URLs as confidential. If a sharing option publishes a report to the public library, only the shared research content is shown — not payment data.

Topic and dashboard analysis uses aggregated public X posts retrieved via platform APIs — not private messages. We produce scores, themes, and paraphrased summaries. We do not sell individual user profiles or private-message dossiers.

Sample sizes and method limits are shown so insights stay directional, not “census” claims. Public aggregates are not personal dossiers about visitors.

Subscriptions are processed via Stripe Checkout. Elenchos never receives or stores full card data (PCI stays with Stripe). Monthly plans include Starter, Plus, and Mega. Stripe’s privacy notice applies to payment data they process as processor/controller for card handling.

We may store a theme preference and similar strictly useful local settings in your browser. The Google Analytics tag (measurement ID G-SM3C2J9L0Z) is present with Consent Mode; analytics storage stays off until you choose Accept on the cookie banner. After Accept we count page visits with IP anonymization. We do not use advertising cookies or sell personal profiles. Choose Essential only to keep analytics off. You can clear site data in your browser at any time.

• Contract: providing paid subscriptions, wallet/token features, and private research reports.
• Legitimate interests: operating the public research site (Dashboard, library, public trackers/topics), security, and service integrity — balanced against your rights.
• Consent: non-essential analytics cookies (Google Analytics via Consent Mode).

We use the following categories of processors / identity providers:

• Supabase — authentication and database.
• Stripe — payments and subscription billing.
• Vercel — hosting and edge delivery.
• X / Google — OAuth identity providers when you choose to sign in with them.
• Email provider — if used for transactional messages (e.g. delivery or account notices).

• Access to your personal data.
• Rectification of inaccurate data.
• Erasure (“right to be forgotten”) where applicable.
• Restriction of processing.
• Data portability where applicable.
• Objection to processing based on legitimate interests.
• Lodge a complaint with your EU/EEA supervisory authority.

To exercise these rights, contact us at citizen.pulse101@gmail.com. For Pro accounts, identify the account (e.g. sign-in email/username). For any remaining token-based guest commission links, include the report token.

• Account data: retained while the account is active (and as needed for legal/billing obligations after closure).
• Private reports: retained while kept for the user under the account.
• Public aggregates: not personal dossiers about site visitors; discourse analytics use public posts in aggregated form.