Identity Verification Disclosure

Verdict · Version 2026-10-06.2

Some polls on Verdict are limited to voters of a certain age, state, or country. To take part in those, and to carry the Verified Voter mark, you can verify your identity with a government-issued ID. This page explains exactly what happens when you do. Verification is optional; you can use Verdict, vote in unrestricted polls, and keep your account without it.

What you provide

• Front and back images of a government-issued ID (driver's license, state ID, or passport); PDF upload is also accepted.
• A selfie and liveness capture to compare the person presenting the document with the ID photo. The verification flow also records session video.

Who processes it

The check is performed by Didit, an identity-verification provider, inside a flow hosted on their systems. Your photos and selfie are sent directly from your phone to Didit. Verdict also sends an internal account identifier (vendor_data), the selected workflow and a return URL to create the session. Verdict processes the verification response to determine eligibility and prevent repeat verification. The current integration does not download ID images or selfies into the Verdict application database; this is not a claim that provider-held records are inaccessible to authorized operators. Didit's own privacy policy governs its handling of them: Didit Verification Privacy Notice.

What Verdict receives and keeps

• The decision — approved or not.
• Your date of birth, used to compute your age when you vote in an age-restricted poll. Verdict stores it for eligibility checks; the exact date is not displayed on public profiles or included in licensed aggregate reports.
• The state and country on the document, used for place-restricted polls and shown as the place on your Verified Voter mark.
• Two one-way hashes: one of the document number and one of your name and date of birth. We derive matching keys for both the document and the person. These hashes are used to detect repeat verification of matching document or name-and-date-of-birth details. They help prevent duplicates but do not prove that every person has only one account. If the document does not yield both, verification is refused rather than granted without them. The integration processes the number and name to derive these hashes rather than retaining them as account fields.
• The session identifier Didit assigns, so the result can be retrieved if a notification is missed.

Limits on use

• The current integration stores the decision, eligibility details, session identifier and duplicate-check hashes described above; it does not download ID images or selfies into the application database.
• Verdict does not use verification data for advertising or sell it. Provider processing and model-improvement use are described below. Licensed statistics are group-level counts with a minimum group size and contain nothing from this process except the state and age bracket you already appear in.
• Verification determines eligibility. Published results are aggregate; stored ballots remain linked to an account identifier.

Biometric information

The selfie step compares your face to the photo on your ID. Some jurisdictions treat this as biometric data. Didit performs the biometric comparison on our behalf. Verdict processes the verification response; the integration does not persist facial geometry in the application database. Provider-held images, video and biometric records are separate from these Verdict account fields. By starting verification you consent to Didit performing that comparison to confirm your identity. Our Didit account currently permits historical and new verification data to be used for improving Didit’s models. This is separate from checking your identity; the specific data involved depends on the verification workflow. The configured verification flow records session video, collects front and back ID images (PDF upload is also accepted), and captures a selfie for liveness and face matching. The configured Didit workflow includes ID verification, liveness detection, face matching, device and IP analysis, and anti-money-laundering (AML) screening. Our Didit application currently has session retention set to Unlimited, so no automatic session-expiry period is configured. This is separate from the retention of records in Verdict. For verification-data requests, contact Adam at adam@varrstacktech.com to coordinate with Didit. For Didit’s independent processing or an objection to model-improvement use, you may also contact privacy@didit.me. Account deletion does not automatically erase provider-held data.

Your choices

• Re-verify after a move or a renewed ID from Profile → Verify your ID. The new document replaces the previous state and age.
• Delete your account from Profile → Legal → Delete my account. Your date of birth, state and country are deleted from your Verdict account record. The one-way hashes of the document and of the person are kept to detect repeat verification when document or person details match — these retained identifiers support repeat-verification matching and are not a guarantee of anonymity.
• Opt out of licensed statistics at Profile → Legal → Do Not Sell or Share My Personal Information. This applies to everyone, verified or not.

Contact

Questions about verification: Adam@varrstacktech.com.