First decide whether a vote is actually needed
Not every group decision needs to become a contest between options. Routine tasks may be delegated, a conflict may require facilitated listening, and changes affecting rights, safety or access may need broader participation. Before opening a ballot, write a clear question, explain what the result can change and identify who will be directly affected. A poorly defined poll produces numbers, but not necessarily a legitimate decision.
In LGBTQ+ groups, revealing a preference may disclose relationships, experiences of discrimination, accessibility needs or a vulnerable position. Trans people, travestis, non-binary people, femboys and feminine people are not interchangeable categories and must not be treated as voting blocs. Ask what minimum information is necessary. The group often needs only the aggregate result, not each participant's identity, label or personal explanation.
Publish neutral rules before the first ballot is cast
Explain in advance who may vote, which choices are available, whether more than one option may be selected, how blank ballots and abstentions work, what quorum applies and what happens in a tie. State the opening and closing times, who will count the ballots and how a concern may be challenged. Rules invented after results appear create opportunities for manipulation and weaken trust.
Present choices with equivalent language, and rotate or randomise their order when placement could influence selection. Do not frame disagreement as failure to support the community. If important new information emerges, pause the process so everyone receives the same context. Quietly editing the question makes earlier ballots incomparable and should require a documented restart rather than an improvised correction.
Separate eligibility, participation and ballot content
A process may need to confirm that each eligible person participates once, but that does not require a table linking names to choices. Where possible, separate the membership list from the ballot box: one person or mechanism confirms eligibility and provides a random code, while another component receives the vote without identity access. In small groups, timestamps, free-text comments and rare response combinations can also identify someone, so avoid collecting them by default.
Do not promise anonymity if the platform displays email addresses, administrators can export individual responses or partial results reveal patterns. Describe accurately whether the process is anonymous, pseudonymous or merely confidential, who has technical access and how long records remain. The ICO's minimisation principle supports collecting information that is adequate, relevant and limited to purpose. Here, that means omitting names, pronouns, locations and explanations whenever totals can be produced without them.
Protect freedom of choice, not only ballot secrecy
Secrecy helps, but it does not remove pressure before or after the vote. Never ask for screenshots, receipts proving a choice, public statements of alignment or private messages to organisers. Avoid individually chasing people who have not voted, especially when leadership, friendship, housing, employment or access to support depends on the group. A general reminder about the deadline is different from demanding proof of loyalty.
OSCE election standards connect secrecy with freedom from coercion, intimidation and fear of repercussions. A community group is not a state election, but it can use the same protective insight: nobody should be able to prove how they voted, and organisers should not reconstruct preferences from technical logs. Provide enough time, accessible instructions and assisted participation that preserves the voter's decisions instead of allowing a helper to make them.
Treat abstention, blank ballots and absence as different
Abstention may reflect a conflict of interest, insufficient information, discomfort with the choices, a privacy need or a deliberate decision not to participate. A blank ballot may record participation without preference. Absence means only that no ballot was cast and does not authorise assumptions about motive or identity. Define these categories beforehand, report them only in aggregate when useful and never publish a list of people who abstained.
Do not turn abstention into suspicion, neutrality into opposition or silence into consent. If quorum is not reached, record that participation was insufficient without searching for people to blame. A high number of abstentions or blank ballots may indicate an unclear question, conflicts of interest or lack of safety. Review the process rather than forcing individuals to justify why they did not want to choose.
Count transparently without publishing personal traces
Use two people without conflicts of interest to verify totals, or a tool that supports aggregate auditing. Record the final question, voting period, applicable rules, valid and blank ballot totals, an abstention total when that option exists, the outcome and any incident. If a ballot must be rejected, document the rule used rather than the participant's biography. Hide interim results so they cannot steer later votes or enable pressure.
Challenges need a defined deadline and channel, reviewed by people without a direct stake in the outcome. Retain only what is necessary during that window. Afterwards, keep the decision and aggregate totals in the community record, while deleting codes, linkable participation lists, individual exports and drafts. Privacy by default limits data volume, accessibility and retention from the planning stage instead of relying on later spreadsheet cleanup.
Turn the result into a reviewable decision, not permission to exclude
A majority does not remove basic rights or make a proposal safe when it exposes a minority. Before implementation, check disproportionate effects, accessibility, conflicts of interest and existing commitments. Publish what was decided, when it starts, who is responsible and when it will be reviewed, without attaching individual preferences. People on the losing side still belong to the group and must not be labelled disloyal or treated as representatives of an entire identity.
In the CorvinNoir experience, trustworthy participation combines a comprehensible question, free choice, proportionate secrecy and a legitimate option not to choose. The group preserves a useful result without building a dossier of disagreement. By separating identity from the ballot, rejecting loyalty receipts, accepting abstention without interrogation, applying pre-announced counting rules and deleting traces, a vote can support collective action without charging personal disclosure as the price of belonging.
Leave your voice on this page.
Comments are published only after CorvinNoir approves them.
…