Privacy policy
Voting on OutPull needs no account. This page explains the small amount of data we do handle, and what we do with it.
Draft — needs legal review. This page describes how OutPull actually works in plain language, but it has not been reviewed by a lawyer. Have counsel check it against your jurisdiction before you rely on it publicly.
Who we are
OutPull operates the competitive arena at outpull.tech. For questions about this policy or about your data, contact us at privacy@outpull.tech.
What we collect from voters
You can cast a pull without creating an account or giving us your name or email. To enforce one pull per person per battle and to reject automated traffic, we process a limited set of technical signals.
We do not derive your location, and several people sharing one internet connection can each cast their own pull.
- A random voter secret stored in an HttpOnly cookie on your device, hashed into a voter key — this, and only this, is what enforces one pull per battle
- A one-way hash of your IP address and of your browser's user-agent string, kept for abuse analysis and never used as the identity key
- Which product the pull went to, and when
- A Cloudflare Turnstile challenge result, to separate people from bots
What we collect from founders
If you register a product, we hold the email address you sign in with, the product details you enter, and the record of your competitive access and bids.
Payments are processed by PayPal. We never see or store your card details.
Why we are allowed to process it
Voter signals are processed on the basis of legitimate interest: without them the count is meaningless and the arena is worthless to everyone in it.
Founder data is processed to perform the contract you enter into when you register a product and pay for competitive access.
How long we keep it
Abuse-prevention signals are retained only as long as the relevant battle plus a short review window, then deleted or irreversibly aggregated.
Founder account and billing records are retained for as long as the account exists and afterwards only where tax or accounting law requires it.
Who else sees it
We share data only with the providers that run the service: our hosting and database provider, our email delivery provider, and PayPal for payments. We do not sell data and we do not run third-party advertising trackers.
When you click through to a competing product, that product's own site sees a normal referral visit and applies its own privacy policy.
Your rights
Depending on where you live you may have the right to access, correct, export or delete your data, and to object to processing. Write to privacy@outpull.tech and we will respond within 30 days.
Because voter pulls are not tied to an identifiable account, we may be unable to locate a specific pull without additional information from you.