What Pull or Skip stores, what it does not, the cookies it sets, how advertising and analytics work here, and how to opt out.
There are no accounts on Pull or Skip. Nobody signs in, nothing you do here is attached to a name, an email address or a profile, and there is no way for us to contact you. What the site stores is votes: which character, and whether the answer was yes or no.
When you start playing, the site sets one cookie named ps. It contains a randomly generated session identifier and the time it was issued, signed so the server can tell it has not been altered. It contains no personal data and nothing derived from you — the identifier is random bytes, not a fingerprint.
The cookie is HttpOnly (scripts on the page cannot read it), SameSite=Lax, sent only over HTTPS in production, and expires after 6 hours. Its only purpose is to let the server remember which characters your session has already been counted for, so that refreshing the page or resuming a run does not count anyone twice. Clearing it gives you a new session and forgets nothing else, because there is nothing else.
Aggregate vote totals are published openly under CC BY 4.0. They contain no information about individuals, because none is collected.
The site runs on Railway, which hosts the application and the two databases holding the vote counters and session records. Traffic reaches it through Cloudflare, which serves as CDN and proxy and therefore sees the network address of every request in the ordinary course of routing it. Google provides analytics and, where enabled, advertising. These are the only third parties involved.
These providers operate internationally, so data handled in the course of serving the site may be processed outside your country. Since the site holds no personal data about you beyond a random session identifier and the transient network address any web request necessarily carries, there is nothing here that identifies you to transfer.
Because votes are never linked to a session once counted, an individual vote cannot be found, exported or deleted afterwards. That is a consequence of not collecting the information rather than a refusal to act on it — there is no record connecting you to anything to act on.
The shareable image at the end of a run is rendered in your browser, on your device. The picture itself is never uploaded. If you share it, you are sharing it — nothing about it reaches this site.
The site uses Google Analytics to count visits and understand which pages people reach. Analytics storage is set to denied by default and only becomes active if you consent through the cookie banner. Until then, measurement runs without cookies and without storing identifiers on your device.
When advertising is served on this site, the following applies.
No advertising is shown during a run — not on the voting board and not on the results screen. That is a deliberate choice: those screens are built around swiping and tapping, and putting an ad next to them would produce clicks nobody meant to make.
Analytics and advertising storage both start denied. The banner shown on your first visit is where consent is given, and the same banner can be reopened to withdraw it. If you are in the EEA, the UK or Switzerland, you will be asked before any advertising or analytics cookies are used.
This site is not directed to children and collects no personal information from anyone, including children.
Questions about this policy, or anything else, go to [email protected]. Rights holders should see the contact page for the intellectual property route.
Unofficial fan project. Not affiliated with COGNOSPHERE or HoYoverse.