Master Privacy Policy & Data Architecture

TownSphere™ is exclusively designed for and restricted to individuals who are at least eighteen (18) years of age (or the age of majority in your jurisdiction). Our platform delivers hard-hitting, real-world political, financial, geopolitical, and societal news events intended solely for mature civic reflection.

We do not knowingly solicit, collect, process, or maintain personal information from children or minors under the age of 18 in accordance with the United States Children's Online Privacy Protection Act (COPPA), California Consumer Privacy Act (CCPA/CPRA), the EU General Data Protection Regulation (GDPR), and India's Digital Personal Data Protection Act 2023 (DPDPA).

If you are under 18 years old, you are strictly prohibited from using TownSphere™, submitting demographics, voting on polls, or sending feedback. If we discover or have reason to believe that a person under 18 has submitted data, we will immediately delete that information from our active databases and purge associated sessions. Parents or guardians who believe a minor has interacted with our services may email our Data Protection Team at townsphere.org@gmail.com.

Unlike conventional social networks, TownSphere™ requires zero mandatory account registration. You do not need to submit an email address, create a password, or authenticate through third-party social profiles (Google or Apple) to read public news digests or cast ballots.

Anti-Sybil Defense & Hardware Cryptography: To prevent ballot stuffing, automated bot-net brigading, and artificial opinion inflation, TownSphere™ enforces a strict One Device, One Civic Voice protocol:

• Client-Side Salted Hash: Upon app launch, a random hardware-derived token (or browser installation identifier townsphere_device_id) is generated and stored locally in private application storage.
• Server-Side HMAC-SHA256 Derivation: When interacting with our API, your client submits this token over encrypted TLS 1.3. Our backend calculates an irreversible pseudonymous voter_id using a private server secret key: HMAC-SHA256(server_secret, device_token).
• Strict One-Way Function: The raw hardware token, device serial, MAC address, IMEI, and network carrier ID are never stored in database ballot records. The mathematical derivation cannot be reversed by third parties or database operators to discover your physical device identity.
• Seamless Ballot Recovery: Clearing your browser cache or updating the application restores your singular voter identity without generating duplicate ballots or corrupting aggregate sentiment.

Traditional polling and comment platforms store user identities and user opinions in adjacent or joined database rows. TownSphere™ completely dismantles this vulnerability:

• Zero Foreign Key Linkage: There is zero foreign key relationship between user accounts or voluntary demographic profiles and the votes table.
• Isolated Data Stores: Even under the hypothetical scenario of a full server database leak, ballots cannot be cross-referenced or joined with user contact details or IP records.
• Signed JWT Bearer Sessions: Client-server handshakes use ephemeral 1-year cryptographically signed JSON Web Tokens (JWT) containing pseudonymous claims, eliminating the need to transmit raw credentials on API requests.

We process only the minimum information necessary to deliver, secure, and improve our services:

• Pseudonymous Voter Identifier: The one-way cryptographic hash output derived from your installation token.
• Voluntary Demographic Attributes (100% Optional): Broad age group (18-24, 25-34, 35-49, 50-64, 65+), occupation industry, education tier, and general geographic region/country. You may skip demographics entirely or edit/purge them at any time in Settings.
• Ballot Submissions: Poll selections, dynamic opinion updates, and timestamps.
• Aggregated Civic Engagement Telemetry: Anonymized event durations (dwell time), card flips, poll share invocations, read-more clicks, and verified source outbound clicks.
• Voluntary In-App Feedback: If you voluntarily report a bug or suggest a news topic via our feedback forms, we receive your message text and any optional email you choose to provide for a response.

To maintain uptime, monitor mobile crash rates, deliver push notifications, and understand broad user engagement, TownSphere™ integrates industry-standard third-party infrastructure:

Current Advertising Status & Future Rights Reservation: TownSphere™ reserves the perpetual right to display commercial advertising, programmatic display advertisements, sponsored public opinion polls, and contextual brand partnerships across all web and mobile surfaces.

To avoid requiring disruptive privacy policy updates whenever new monetization features launch, you acknowledge and agree that:

• Contextual & Programmatic Advertising: We may partner with recognized third-party advertising exchanges, affiliate networks, and commercial sponsors (such as Google AdSense/AdMob or contextual civic partners) to serve advertisements within the feed, explore screens, and poll conclusion cards.
• Aggregated Audience Insights: We may share aggregated, high-level demographic sentiment summaries (e.g., “64% of healthcare workers favored Policy X”) with researchers, journalistic outlets, and civic sponsors. No individual voter identities or personal records are ever sold, licensed, or transmitted.
• Opt-Out of Behavioral Profiling: We honor browser-level Global Privacy Control (GPC) signals and provide cookie management banners enabling users to decline targeted cross-context behavioral advertising cookies at any time.

TownSphere™ enforces algorithmic guardrails around re-engagement. Mobile push notifications delivered via Firebase Cloud Messaging adhere to:

• Strict Frequency Capping: A platform ceiling of 4–5 alerts maximum per 24-hour cycle.
• Quiet Hours Protection: Suppression of non-critical push notifications during nighttime local hours.
• Instant Unsubscribe: You can mute all notifications directly in device OS Settings or in the TownSphere™ Settings tab with immediate effect.

TownSphere™ provides robust data subject rights to all users globally, aligning with the strictest international statutory frameworks:

We practice aggressive data minimization. Because TownSphere™ does not enforce user accounts or password databases, there are no personal credential tables stored on our servers.

• In-App Demographic Purge: You can purge your voluntary demographic profile anytime in Settings → Clear Demographics.
• One-Click Account & Identity Deletion: Navigating to Settings → Delete Account (or accessing https://townsphere.org/delete-account.html) triggers immediate client-side token destruction and notifies our backend to invalidate your pseudonymous HMAC voter token.
• Browser Storage Cleansing: Clearing site cookies and localStorage in your browser immediately terminates your session and severs all local associations.

All data transmission between your device and TownSphere™ is protected by TLS 1.3 encryption with modern cipher suites. Our backend infrastructure incorporates distributed DDoS rate-limiting, strict CORS origin isolation, SQL-injection prepared statements, and Sybil ballot integrity validators. While no transmission over the internet can be guaranteed 100% impenetrable, TownSphere's architectural decoupling ensures that even a catastrophic perimeter breach would yield only anonymized aggregate counts.

TownSphere™ reserves the unilateral right to update, modify, expand, or restate this Privacy Policy at any time to reflect advancements in technology, infrastructure updates, regulatory enactments, or changes in our operational and monetization models.

When material changes occur, we will update the “Effective Date” at the top of this document, publish prominent banner notices across web and mobile platforms, and, where mandated by law, prompt you for affirmative re-acknowledgment. Your continued access or use of TownSphere™ following the publication of any modifications constitutes your unconditional acceptance of the revised policy.

If you have questions, statutory data requests, legal inquiries, or accessibility observations regarding this Privacy Policy, please contact our Data Protection and Legal Compliance Officer: