Legal
Privacy Policy
Last updated: August 28, 2026
This policy should be read with our Terms of Service.
Community features are paused. Voting, horizons and proposal browsing are suspended (COMMUNITY_ENABLED=false). They are described below for reference and apply the same data handling if they return. Account creation is closed for now.
1. Introduction
Elyon Foundation ("we", "us", or "our") operates elyonfondation.org (the "Website"). This Privacy Policy explains what information we collect, why we collect it, and how you can control it.
The Website is a public grant platform. We fund projects. We do not ask the public for donations, and we do not collect payment details.
If you do not agree with this policy, please do not use the Website.
2. Information We Collect
We do not require a name, email address, or password to create an account. We only collect what is needed to run the site, prevent abuse, reply when you contact us, and send updates if you ask for them. All public forms include a hidden honeypot field; submissions that fill it are silently ignored.
Accounts. Creating an account is open to everyone. Your browser sends the request to POST /api/signup; the server applies anti-abuse limits (a bot-wall, a per-browser rate limit, and a global rate limit). When signup succeeds we create:
• An access key (7-word phrase you use to log in; older 5-word keys still work). We show it once at signup. We cannot email it to you. We store a hash of the key, not the key itself.
• A public ID (a 12-character code). This is shown with your votes so others can tell which account voted, without seeing your key.
• A hashed network identifier used to enforce limits (2 accounts per network). The raw network address is kept only in a staff-only abuse log — it is not shown on the Website and is not readable with the public database key.
You can view your key and public ID, change your key, or delete your account from My Account.
Votes. You can vote with or without an account. For each vote we record:
• The project you voted for
• Your reason, optional comment, and scores
• The time of the vote
• Your account, if you are logged in
• A hashed network identifier and the raw address taken from Cloudflare's CF-Connecting-IP header on the server. The hash is used to enforce 1 vote per project — per account if you are logged in, otherwise per network hash; the raw address lives only in the staff-only network_log and audit_log for abuse investigation and is not shown on the Website.
• Limited browser information (user agent, truncated to 200 chars), used to help detect abuse
Voting is paused and no new votes are being collected.
Project proposals. When you propose a project we collect the project name, your description, an optional display name, your account if you are logged in, and a hashed network identifier plus raw address taken from Cloudflare's CF-Connecting-IP header on the server. That address is not shown on the Website. Limits: 2 proposals per network per 24 hours.
Funding applications. When you request funding we collect the project name, description, impact objective, whether the work is a concept or already launched, an optional name or pseudonym, an email address and/or another contact method, whether you are open to a partnership, files you attach (images or PDF, up to 8 files, 50 MB total), your account if you are logged in, and a hashed network identifier plus raw address to limit spam (1 application per network per 6 hours). Applications are not published. Files are stored as one encrypted archive per application in Cloudflare R2 (elyon-fondation/candidatures), readable only with the admin key. If you are logged in, you can see your own applications from My Account.
Contact messages. When you use the contact form we collect your name, email address, subject, and message so we can reply. If you are logged in, the message may be linked to your account. We also record the hashed and raw network address plus email to limit spam: 1 message per minute and 5 per hour per network or email (checked locally and on the server). A receipt is sent to your email if provided; our team is notified at CONTACT_NOTIFY_EMAIL and [email protected] via Lettermint.
Email updates. Accounts do not use email to log in. If you opt in from My Account, we store the email address you provide, your consent, the time of that consent, a 32-hex unsubscribe token, and the network address of the request to limit abuse (8 per hour per IP, 10-second debounce per account). This is optional. You can unsubscribe from My Account or from the List-Unsubscribe link in every update email, including anonymously via /newsletter/unsubscribe?token=…. We suppress email-enumeration: if the address is already used by another account, we silently move it and do not reveal whether it was taken.
Technical information. When you visit the Website, Cloudflare (our host) may record standard request logs (such as IP address, time, and the page requested) and enforce HTTPS, HSTS and security headers. We do not use this for advertising. For votes, signup, proposals, funding and contact the network address is taken server-side from CF-Connecting-IP. We hash the address for limits and keep the raw value only in the staff-only logs.
3. How We Use Your Information
We use the information above to:
• Keep you logged in and let you manage your account
• Count votes, show community interest, and inform grant decisions
• Review project proposals before they appear on the site
• Review funding applications and, if we choose a project, stay in contact about it
• Reply to messages you send us
• Send you our own updates, only if you opt in
• Prevent spam, duplicate votes, and automated abuse (including honeypot and 5-second bot-wall checks)
• Investigate suspected threats or abuse (including account IDs, hashed and raw network addresses in the staff log)
• Keep the Website secure and working
We do not sell, rent, or share your information with third parties for their advertising. We do not run ads on the Website. If you opt in, we may email you about our work. We do not send emails from other organizations.
4. What Is Public
Votes are public. Anyone visiting the Website can see the project, reason, scores, optional comment, time, and — if you voted while logged in — your public ID. Guest votes are shown without a public ID.
Approved project proposals are public. If you included a name, that name is shown with the proposal. Pending proposals are not published. Funding applications and their files are not published.
Your access key, network address (raw or hashed), and, if you opted in, your email address are never shown on public pages. Do not post your key in a vote comment or proposal.
5. Cookies and Local Storage
We use a single session cookie elyon_session so you stay logged in. It is Secure, SameSite=Lax, and can last up to one year, or until you log out. If you are inactive for about one hour, we end the session.
Your browser may also store small technical values locally: elyon_last_active (session timeout), elyon_last_signup (1 per hour), elyon_last_contact and elyon_contact_hours (1 per minute, 5 per hour), and elyon_last_funding (1 per 6 hours). These values stay on your device and are used only for session timeout and abuse limits.
We do not use cookies or similar tools for analytics, advertising, or cross-site tracking.
6. How Long We Keep Information
Accounts: kept until you delete them. Deleting your account removes the account and also deletes votes, proposals, contact messages, newsletter subscription and funding applications linked to it. This cannot be undone.
Votes: kept while they are live. You can remove your own votes from My Account. Removed votes are moved to votes_trash and permanently deleted after 30 days by an automatic cleanup.
Proposals: kept so we can review them and, if approved, display them. Removed proposals are moved to proposals_trash and deleted after 30 days. If you delete your account, proposals linked to that account are removed.
Funding applications: kept so we can review them. They are not published. Files are kept with the application until we no longer need them for review. Deleting your account also deletes your funding applications.
Contact messages: kept so we can read and reply (about 90 days, then deleted when no longer needed). They are removed if you delete a linked account. We may delete older messages sooner when they are no longer needed. A network and audit log entry is kept for abuse review (see below).
Email updates: kept while you stay subscribed. If you unsubscribe, we keep a record that you opted out so we do not email you again. Deleting your account removes the subscription.
Network and audit logs: we keep a minimal network_log (event, hashed and raw network, account/public ID, user agent, time) and audit_log (accounts/votes inserts/updates/deletes) for abuse investigation. They are accessible only via the service role (not the public anon key) and are retained as needed for security, then deleted when no longer needed. Raw addresses are never public; column grants hide them from anon reads.
Hosting logs: retained by Cloudflare according to its own practices, typically for a short time, with HSTS and HTTPS enforced.
7. Who We Share Information With
We share information only with the service providers needed to run the Website, and only for the purposes in this policy:
Hosting and security. The Website is hosted by Cloudflare. Cloudflare may process request logs, including IP addresses, as part of hosting and protecting the site and enforces HTTPS, HSTS (max-age=63072000 includeSubDomains preload) and security headers.
Data hosting. Account, vote, proposal, funding-application, contact, subscription, network and audit data is stored with Supabase acting on our instructions. Supabase encrypts data at rest. Raw network addresses are hidden from the public anon key by column grants and RLS and are accessible only via the service role. Funding-application files are stored encrypted in Cloudflare R2 (elyon-fondation/candidatures), one encrypted archive per application (private, 50 MB total), readable only with the admin key.
Email delivery. Contact-form messages, funding-application notices, and optional update emails are sent through Lettermint (api.lettermint.co/v1/send). For contact messages, Lettermint receives your name, email address, subject, and message to deliver the note to our team and a receipt to you. For funding applications, it receives only a link pointing to our private review page to notify our team (no application details in the email), and — if you left an email — a confirmation that we received your application. For updates, it receives your email address and the message content to deliver the email to you, with List-Unsubscribe and List-Unsubscribe-Post headers.
Network address. Votes, signup, proposals, funding and contact take the address server-side from CF-Connecting-IP and hash it. We use the result only to prevent duplicate and automated submissions.
We may also disclose information if required by law, or if needed to protect the Website, our users, or others from serious harm.
8. Your Rights
Depending on where you live, you may have the right to:
• Access the personal data we hold about you
• Ask us to correct inaccurate data
• Delete your account and associated data from My Account
• Remove individual votes from My Account
• Unsubscribe from email updates, or change the address we use
• Object to or restrict certain processing
• Receive a copy of data you provided (portability)
You can handle most of this yourself from My Account. For anything else, use our contact page.
We cannot recover a lost access key. Login does not use email. If you lose your key and are no longer logged in, we cannot restore access. If you subscribed to updates, you can still unsubscribe with the link in those emails or via /newsletter/unsubscribe?token=… without logging in.
9. Security
All traffic to the Website uses HTTPS (HTTP redirects to HTTPS, HSTS preload). Information is encrypted in transit, and our database host encrypts data at rest. Raw network addresses used for abuse investigation are hidden from the public anon key by column grants and RLS and are not exposed on public pages. No website can promise perfect security. Keep your access key private. Anyone with your key can use your account.
10. Children's Privacy
The Website is not directed to people under 16. We do not knowingly collect personal information from children. If you believe a child has used the site, contact us and we will delete the related data.
11. Where Information Is Processed
We and our service providers may process information in countries other than yours. Those providers protect it under their own policies and applicable law.
12. Changes to This Policy
We may update this Privacy Policy. Changes take effect when posted on this page, with a new "Last updated" date. Continued use of the Website after a change means you accept the updated policy.
13. Contact Us
Questions about this policy or your data: use our contact page.