How your data is protected: Biometric scans are processed on your device only. A cryptographic key pair is generated locally; the secret half never leaves this browser and the public half is your anonymous id. Every record you make — an enrollment, a question, an opinion, a standing vote — is an event signed with that key. One key per person means one vote per person.

Relays carry; browsers verify: Records travel through Nostr relays — plain, interchangeable servers that store signed events and serve them back by filter. There is no relay you have to trust: your browser verifies every signature itself, and no single relay is depended on — the page reads from several, you can add your own, and a community can run one for itself. What a relay can see is what every reader can see: which anonymous key posted which record, and when.

Durable, everywhere: Everything is persisted to IndexedDB on your device and re-published from your outbox whenever you connect, so a relay that was down catches up. The record outlives every open tab. Data is a grow-only set keyed by event id: append-only, no conflicts, and order is derived at replay, never trusted from arrival.

Local processing, no groups: Sentiment scoring and bias detection run locally in your browser. Nothing clusters, segments, or models people into groups: every number is a count of individuals. No external AI service is contacted.