Effective date: July 11, 2026
Top Vaper (“we”, “us”) operates topvaper.com, a voting platform for the vaping community based in the US, UK, EU and Canada. This policy explains what we collect, why, and what your choices are. We keep it in plain language because you should actually be able to read it.
Who this site is for
Top Vaper is intended only for adults of legal vaping age in their region (21+ in the US, 19+ in most Canadian provinces, 18+ in the UK and EU). We do not knowingly collect information from anyone under legal age; if we learn we have, we delete it.
What we collect and why
Account information
When you register we collect your username, email address, and password (stored as a cryptographic hash – we never see or store your actual password), the date you confirmed you are of legal vaping age, and whether you opted into email updates. We use this to operate your account, enforce one-member-one-vote, and – only if you opted in – send you poll and results emails.
Voting records
When you vote, we record your choice, the time, a salted hash of your IP address, and your browser’s user-agent string. Votes are linked to your account (member votes), your personal voting link (verified campaigns), or an anonymous voter ID (open community polls). We use this to prevent duplicate voting, detect manipulation, and publish accurate results. Published results are always aggregate – vote counts and percentages, never who voted for what.
Anonymous voting cookie
Open community polls can be voted on without an account. To prevent duplicate votes, your browser stores a randomly generated voter ID in a cookie (“tvp_vid”) for up to two years. We store only a salted hash of that ID, which cannot be linked to your name or email – we do not know who you are; we only know whether this browser already voted in a given poll.
Verified campaigns – we don’t receive brand mailing lists
Verified campaigns are run together with a sponsoring brand. Top Vaper does not receive the brand’s customer list. We generate anonymous, single-use voting links, and the brand sends them through its own email system, to its own customers, under its own consent. If you vote through one of these links, your choice is recorded against the anonymous link – not against your name or email. The brand can connect that link back to you through their own records; Top Vaper cannot, because we never receive your identity in the first place. Aggregate results are published on Top Vaper when voting closes.
Requesting a public voting link
Some verified campaigns are open to public voting. If you request a voting link, we store your email address to enforce one vote per person in that campaign – that is its only required use. If you also tick the opt-in box, we’ll email you the published results and occasional Top Vaper polls; every such email includes an unsubscribe option, and you can withdraw consent at any time via our contact form. We never share these addresses with campaign brands or anyone else.
Polls you create
If you create a community poll, your poll question, options, and username are associated with it and reviewed by a moderator before publication.
Contact form
If you contact us, we collect what you send us – name, email, company if given, and your message – and use it to reply. Form submissions include technical metadata (IP, timestamp) for spam prevention.
Technical and security data
Like nearly every website, our servers keep standard access logs (IP addresses, pages requested, timestamps). Our security systems log request data to block attacks, spam, and abusive traffic. Our site is delivered through Cloudflare, which processes visitor traffic as our content-delivery and security provider. Your browser also stores a flag remembering that you passed our age confirmation, so you are not asked on every visit.
What we do not do
We do not sell your personal information. We do not run third-party advertising trackers. Sponsors and brands never receive access to member accounts, email lists, or anything beyond the campaign data described above. Money cannot buy votes or rankings on this platform, and it cannot buy your data either.
Emails we send
Transactional email – password resets, poll moderation decisions, replies to your inquiries – is sent as needed to operate the service. Marketing and update emails are sent only with your express consent (the optional checkbox at registration) and every one includes an unsubscribe link, in accordance with Canada’s Anti-Spam Legislation (CASL). Withdrawing consent stops marketing email but not essential account email.
Where your data lives
Our servers are located in the United States. If you are in Canada, the UK, or elsewhere, your information is transferred to and stored in the US, where it may be subject to US law. We apply the same protections regardless of where you are.
How long we keep it
Account data is kept while your account exists. Voting records are kept for the life of the poll’s published results, because they are the audit trail behind every result we publish; if you delete your account, votes tied to it are disassociated from your identity. Contact messages are kept as long as needed to handle them. Server and security logs rotate automatically on a short cycle.
Your rights and choices
You can request access to the personal information we hold about you, ask us to correct it, or ask us to delete your account and associated personal data. You can withdraw marketing consent at any time via the unsubscribe link or by contacting us. To exercise any of these, use our contact form. If you are in Canada and are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada.
Changes to this policy
If we make material changes – for example, introducing analytics or new features that collect new data – we will update this page and revise the effective date. Continued use of the platform after changes means the updated policy applies.
Contact
Privacy questions: contact form, topic “Something else”, or write to the address in our site footer if one is listed. We respond to privacy requests within 30 days.