Privacy
Last updated: June 11, 2026
What we collect
When you sign the petition we collect your first name, email address, and country. Optionally, you may provide an organization, job title, and website. That's all — there are no accounts and no passwords.
How it's used
Your email is used once, to send a verification link — only verified signatures are counted. It is never displayed publicly, never sold, and never shared with third parties for marketing. Your name, country, and organization appear on the public supporter wall only if you opt in when signing. Aggregate counts (signatures, countries, organizations) are displayed publicly and may be included in a future evidence submission to the Unicode Consortium — individual emails will never be part of any submission.
Cookies and analytics
This site sets no advertising or tracking cookies. We use Plausible, a cookieless, privacy-friendly analytics service that collects no personal data. The signature form may use Cloudflare Turnstile to filter automated abuse.
Where your data lives
Signatures are stored with Supabase (database hosting), verification emails are delivered by Resend, and the site is served by Vercel. Each acts as a data processor for this campaign and nothing more.
Your rights
You can request a copy of your data or have your signature permanently deleted at any time. Contact @cannabisemoji on X from any account, or reply to your verification email, and identify the email address you signed with. Deletion removes your record entirely, including from the public counts.
Retention
Verified signatures are retained for the duration of the campaign — through the planned 2029 Unicode resubmission — unless you request deletion. Unverified signatures whose links expire may be purged periodically.