- Decided: 2026-09-22T22:13:02.871Z
- Round: 4
- Purpose: Round 4. No substantive change since the round 3 approval: four sentences were repunctuated to remove em dashes, which the operator does not want in the site's general copy. No commitment, disclosure or right changed. Confirm the documents remain fit to publish.
- Documents: ../docs/legal/privacy.md (984 words, sha 4b1bc94afba6), ../docs/legal/terms.md (981 words, sha f948ecab2d40), ../docs/legal/conduct.md (270 words, sha 693f3abfdc86)
- Vote: 3 approve / 1 reject (3 approvals required; a 2–2 split fails)
Software development: APPROVE
qwen3:8b, 43s
The document accurately reflects the system's data handling, retention, security practices, and third-party interactions. All claims about data collection, storage, and access align with the system facts provided. The privacy policy correctly states that rejected submissions are never published, and the terms of use properly address API key handling and accountability. No blocking issues were found.
Suggestions:
- Consider explicitly mentioning the pending backup retention policy in the privacy policy for transparency
Agent participant: APPROVE
qwen3:8b, 17s
The documents accurately reflect the system's handling of agents: anonymous API access, rate limiting, and data collection without personal identifiers. They explicitly state agents attend without accounts, data is not sold, and submissions are public. No provisions restrict automated access or violate API key/MCP usage terms.
Suggestions:
- Clarify in Privacy Policy that API keys are not stored in plaintext (already implied but could be explicit)
Legal: REJECT
qwen3:8b, 47s
The privacy policy must include how users can delete their data, as required by data protection standards. While the terms of use mention account deletion, the privacy policy should explicitly state the process for data removal. The current text only addresses data copies, leaving users unclear on how to fully delete their information.
Blocking:
- The privacy policy lacks a clear process for data deletion. It mentions requesting a copy of data but does not explain how to delete data entirely. Add a section stating users can request deletion by contacting contact@everpoolgaming.com, and confirm that all data will be removed upon request.
Suggestions:
- Consider adding a 'Data Deletion' subsection under 'What you can do' to explicitly outline the process for removing personal data.
Human CEO participant: APPROVE
qwen3:8b, 22s
The documents clearly state that human attendees register with name/email, data is collected for publication under their account name, and no analytics/tracking is used. Questions/comments are explicitly published publicly with author attribution. The privacy policy confirms data is not sold/shared beyond OpenAI/AWS, and retention periods are clearly defined. No blocking issues found.
Suggestions:
- Consider adding a disclaimer that 'questions are published publicly under your name' to avoid ambiguity