Privacy policy

Last updated: August 2026 — your privacy is not a legal clause here; it is the platform’s condition of existence.

The governing principle

Lak Door is a civic participation platform for an audience that may live in sensitive contexts. We therefore commit to data minimisation: we collect only what the principle “one person, one account, one vote” requires — and nothing else.

What we collect, and why

• Your name: to show your identity inside the platform (you may post under a pseudonym).
• Phone number and email: to verify the account belongs to a real person and for security contact only — never marketing.
• National ID number: used once, to guarantee account uniqueness. It is never stored as text: we keep an irreversible cryptographic hash for duplicate checks, and an AES-256-encrypted copy. No employee, moderator or party ever sees it, and we never ask for a photo of the ID.
• Your votes, proposals and comments: the participation content itself — the purpose of the platform.
• Images you attach to a proposal: metadata is stripped before storage — location coordinates, capture time and device model. A phone photo can carry your position to within metres; whoever uploads a photo of a demolished house may be uploading where they stood and when. So we never store that. We also discard your original file name, because file names carry names of people and places.
• Governorate or diaspora country, and year of birth: entirely optional and empty by default, erasable any time from your account page. They serve one question: which governorate, community or age group is missing from the platform. That is why we ask for the governorate, not the town, and the year, not the date of birth — what we do not collect cannot leak and cannot be demanded from us. These fields are never linked to how you voted, never appear on your public profile, and reach administrators only as aggregates after every cell below the declared threshold is suppressed.

What we never do

• We do not sell or share your data with any advertiser or data broker — not now, not ever.
• We do not hand your data to any faction, party or authority; the platform is fully independent and hosted in Europe under GDPR.
• We do not track you outside the platform and use no advertising trackers.
• We never show your ID number, phone or email to any other user.
• We never compute “how region X voted.” Nothing in the platform crosses your location or age with your opinion — not for administrators, not for researchers, not for us. A map of that kind is not transparency but a targeting tool; the difference is that the first holds power to account and the second endangers people.

Security

All traffic is encrypted (TLS); sessions use short-lived tokens revoked on any suspicion; passwords are hashed with standard algorithms that make them unrecoverable; and every administrative action is written to an immutable audit log.

Your rights

• Read and correct your data at any time from your account page.
• Delete your account permanently with a single request — your personal data is erased, and your public content remains as “deleted user” or is removed on request.
• Post under a pseudonym while your account stays internally verified.

Contact

For any privacy question or request: privacy@lakdoor.ps — we reply within 72 hours at most.