Privacy Policy
Last updated 20 September 2026
Humanity Decides asks for as little as it needs to count one person once, and publishes only what you choose. This policy explains exactly what that means, and covers humanitydecides.org and every message Humanity Decides sends you.
1. Who we are
Humanity Decides runs the campaign and the website at humanitydecides.org. For anything about your data, use our contact form.
2. What we collect when you sign
Your first and last name, your country, and your email address.
How you want your name to appear: in full, first name and last initial, initials, or kept private.
Optionally: your postal or ZIP code, who you are signing for, your answer to our voting question, and whether you want campaign updates.
The exact version of the declaration you agreed to, and when you signed and verified.
3. What we collect automatically
Your IP address, which we never store as it is. We keep only a scrambled, one-way version (a keyed hash) to detect abuse such as mass fake signing.
If you choose to verify by text rather than by email, your mobile number, which is treated the same way: we keep only a scrambled, one-way version, so the same phone cannot confirm two signatures. The number itself is not stored, published or shared, and it is sent to our text-message provider only to deliver the code.
The approximate country of your connection, used only to suggest a country on the form. You choose the country you sign from.
If you arrived through someone’s share link or a campaign link, the referral code and campaign tags in that link, so we can see which sharing works. If another website linked you here, the name of that website alone (such as reddit.com), never the page you came from.
Simple usage events we record ourselves, such as a signature being started or verified, and which step of the form someone stopped at. These never include what you typed. We do not use advertising trackers; how we measure the site and catch errors is explained below.
4. How we use it
To confirm each signature belongs to a real person who signed once, and to count it.
To show your name publicly in the form you chose, alongside your country and, if you gave one, who you are signing for.
To prevent fraud and abuse, and to remove signatures that are fake.
To send you campaign updates, only if you opted in. Every update includes a way to stop them.
To publish aggregate totals, such as the number of verified signatures in each country.
5. What is public
Your name, in the form you chose, and your country. If you chose to keep your name private, it is never listed, and in live activity you appear only as “Someone”, with your country shown only when enough people from your country have signed that it cannot identify you.
We never publish your email address, phone number, postal code, IP address or voting answer.
7. Mobile numbers and text messages
If the confirmation email cannot reach you, you can ask us to send a six-digit code by text. You type the number yourself on that screen, and nothing is sent unless you ask for it.
We do not store your mobile number. We keep only a scrambled, one-way version of it, so that the same phone cannot confirm two signatures. The number itself is passed to our text-message provider, Twilio, for the single purpose of delivering that code.
We do not sell or share your SMS opt-in data or personal information with third parties for marketing purposes. No mobile information is shared with third parties or affiliates for marketing or promotional purposes, and text messages are only ever a code you asked for: we never send campaign news, updates or advertising by text.
Reply STOP to a message to receive nothing further, or HELP for help.
8. How we measure the site
We count how the site is used so we can tell what works: pages viewed, the film played, the signing form started and finished, and links shared. This is measured with PostHog, hosted in the European Union.
It is set up to be as quiet as we can make it: no analytics cookies and nothing stored on your device. To count visits without cookies, PostHog makes an anonymous code on its own servers that changes every day. Your IP address is not recorded, no profile is built about you, and nothing you type into the signing form or the contact form is ever sent to it. We do not record your screen.
When something on the site breaks, an error report is sent to Sentry, hosted in the European Union, so we can fix it. Reports are stripped before they are sent: no names, email addresses, form contents, cookies, secret links or IP addresses.
10. How long we keep it
We keep verified signatures for as long as the campaign runs, because they are the record of who took part.
Signatures that are never verified are not counted, and we may delete them.
Verification links expire after 3 days.
11. Your rights
You can ask us to see the data we hold about you, correct it, change how your name appears, withdraw your signature, or delete your data. Write to us through our contact form, using the email address you signed with, and we will respond within 30 days.
Depending on where you live, laws such as the EU and UK General Data Protection Regulation or the California Consumer Privacy Act give you these and other rights, including the right to complain to your data protection authority. We rely on your consent to record and publish your signature, and on our legitimate interest in preventing fraud.
12. International transfers
Our service providers may process data in the United States and other countries. Where required, they do so under appropriate safeguards such as standard contractual clauses.
13. Security
Connections to the site are encrypted. IP addresses and phone numbers are stored only in hashed form. Access to signer data is limited to a small number of administrators, each protected by two-factor authentication, and every administrative change is logged.
14. Children
You must be at least 13 years old to sign. If you are under 18, please ask a parent or guardian before you sign. If you believe a child under 13 has signed, contact us and we will remove it.
15. Changes to this policy
If we change this policy, we will update the date at the top. If a change materially affects how we use data you have already given us, we will tell you before it applies.