Privacy policy

When you sign up, Outyet stores your email address, signup source when available, consent time and policy version, confirmation and unsubscribe token hashes, subscription status, and delivery results. Raw subscription credentials are not stored.

The application stores one-way rate-limit identifiers instead of IP addresses in its abuse-control table. Administrator sign-in sessions may retain an IP address and browser user-agent for access security. Public landing-page analytics contain an allowlisted campaign token and path, not email addresses or arbitrary query values.

Outyet uses this information to confirm your request, send the weekly forecast, prevent duplicate or unwanted mail, measure the six-week Phase 0 experiment, investigate delivery problems, and document consent or suppression decisions.

The signup checkbox is never preselected. You must confirm by email before becoming eligible for the weekly forecast. Every marketing email includes an unsubscribe route that works without an account, and an unsubscribe, complaint, or hard bounce removes the address from eligible sends immediately.

When configured, Outyet uses cookieless Plausible analytics only on the public landing page. It does not load analytics on confirmation or unsubscribe credential routes. Vercel, Railway, Neon, Resend, and Plausible process limited data to host the service, store records, deliver email, or measure public-page use.

When configured, Sentry receives server and worker error reports so Outyet can diagnose failures. Browser error tracking, default personal-data collection, and performance tracing are disabled. Before sending, Outyet removes request and user contexts, authorization and cookie data, email fields, credentials, raw payloads, URLs, and secret-like values and limits context depth, list length, and text length. Reports can still include a scrubbed error stack, service, environment, deployed release, route or job identifiers, and safe operational context.

Outyet keeps personal delivery data only while it is needed to operate the subscription, analyze Phase 0, resolve delivery issues, and honor consent or suppression history. After an unsubscribe or suppression, Outyet retains the minimum do-not-contact record needed to avoid mailing the address again. Sent editorial digest content is kept as a public archive.

Contact Outyet to ask what information is associated with your subscription or to request a correction or deletion review. Some minimal opt-out or suppression evidence may need to remain so Outyet does not mail the address again.