The Problem
Every digital voting system
makes you choose.
Privacy or transparency. Anonymity or accountability. Pick one.
Centralized Systems
Google Forms, SurveyMonkey, Doodle. The admin sees everything. The count could be changed. You just have to trust them.
Blockchain Voting
Immutable ledger, yes. But every vote is public. Coercion becomes trivial. And good luck explaining gas fees to your neighborhood association.
Paper Ballots
Still the gold standard for real elections. But try coordinating a paper vote across three time zones for your distributed organization.
No System At All
So decisions get made by whoever shows up. Or whoever talks loudest. Or not at all.
Prestige's Answer
Cryptographic privacy.
Mathematical certainty.
Commit, then reveal.
You submit an encrypted commitment—a cryptographic promise of your vote. Only after the deadline do you reveal. No one can see how anyone voted until everyone has voted. No strategic last-minute changes.
Unlinkable eligibility.
Freebird VOPRF tokens prove you're allowed to vote without revealing who you are. The issuer can't connect your eligibility token to your vote. Cryptographically impossible.
Nullifiers prevent double-voting.
Each voter generates a unique nullifier per ballot. Vote twice? The second nullifier matches the first. Caught. But the nullifier reveals nothing about your identity or your choice.
Public verification, private ballots.
Anyone can verify the tally. Every commitment is public. Every reveal is public. The math is public. Only the link between voter and vote stays private—forever.
How It Works
Four phases. Zero trust required.
Create
Define your question and choices. Set the deadline. Invite voters.
Vote
Voters submit encrypted commitments with unique nullifiers.
Reveal
After deadline, voters reveal their choices. Commitments verified.
Tally
Results computed from valid reveals. Publicly auditable.
Cryptographic Guarantees
Not promises. Proofs.
Ballot Secrecy
No one learns how anyone voted. Not the admin. Not other voters. Not us.
Eligibility
Only authorized voters can vote. Enforced by cryptographic tokens, not honor systems.
No Double Voting
One vote per eligible voter per ballot. Nullifiers make duplicates mathematically detectable.
Verifiability
Anyone can verify the tally is correct. All commitments and reveals are public.
Coercion Resistance
Commit-reveal scheme prevents strategic voting and vote-buying.
No Server Trust
Results are computed client-side from public data. Verify yourself.
Use Cases
From DAOs to PTAs.
- Board Elections Nonprofits and membership organizations running anonymous director elections with auditable results.
- Union Votes Strike authorization, contract ratification, officer elections—without management surveillance.
- DAO Governance Decentralized organizations that want privacy without blockchain's public-vote problem.
- Academic Committees Tenure decisions, grant reviews, admissions committees. Secret ballots with audit trails.
- Community Decisions Housing associations, religious congregations, neighborhood councils. Democracy that actually works.
- Internal Team Polls Honest feedback without fear of retaliation. Sprint retrospectives people actually trust.
Why It Matters
The case for infrastructure.
Democracy is a technology. Like all technology, it can be well-designed or poorly designed. The secret ballot was a design decision—a deliberate choice to protect voters from coercion and bribery.
Digital tools have mostly abandoned this principle. We've traded privacy for convenience, secrecy for auditability. Prestige proves you don't have to choose.
Every organization that makes collective decisions deserves infrastructure that makes those decisions trustworthy. Not just nation-states. Not just corporations that can afford consultants. Everyone.
Technical Foundation
Built on proven primitives.
Freebird VOPRF
Verifiable Oblivious Pseudorandom Function for unlinkable eligibility tokens.
Pedersen Commitments
Cryptographic commitments that bind votes without revealing them.
BFT Witnesses
Byzantine fault-tolerant timestamping proves when votes were cast.
CRDT Sync
Conflict-free replication for federated deployments via HyperToken.
Progressive Web App
Install anywhere. Works offline. Syncs when connected.
Tor-Friendly
Enhanced privacy mode with timing obfuscation and IP anonymization.
git clone https://github.com/flammafex/prestige
cd prestige
npm install
npm run build
npm start
Project Status
What's done. What's next.
Funding Goals
What support enables.
Security Audit
Independent cryptographic review of the protocol and implementation.
Documentation & Tutorials
Lower the barrier for organizations to deploy their own instances.
Browser Sandbox
Try Prestige without installing anything. Lower friction, faster adoption.
Accessibility Improvements
Screen reader support, internationalization, mobile optimization.
Integration Libraries
SDKs for embedding Prestige voting in existing applications.
Protocol Standardization
Work toward interoperability with other democratic infrastructure projects.