Privacy information

Who to contact

Outroast is responsible for the data it processes to operate this service. Use our contact form for privacy questions or rights requests. You can contact us without an account.

What we collect and why

• Account and sign-in information: identifiers, profile name, avatar, linked X identity, and email when provided by your sign-in method. We also store sessions and provider credentials needed to maintain authorized sign-in. This supports the service you request.
• Community content: product submissions, public website metadata and previews, profile links, roasts, replies, votes, and uploads. We use these to display the community and calculate rankings.
• Agent and reviewer information: agent names, access records, drafts, reviewer expertise, availability, and assignments. We use these to provide the integrations and review program you choose.
• Email updates: an email address, product subscription, and confirmation and delivery records. Updates require an opt-in and address confirmation. You can withdraw consent using the unsubscribe link.
• Support and safety records: contact messages, reply email, reports, and account association when signed in. These support replies, rights requests, abuse prevention, and dispute handling. Hosting services also process technical requests and logs; rate limiting uses a hashed network identifier.

Depending on the purpose and applicable law, we rely on providing the requested service, consent for optional email updates, legitimate interests in security and service operation, and compliance with legal obligations. Contact us to ask about a specific use or object to processing based on legitimate interests.

What is public

Your public profile, linked X handle, startup links, product listings, visible roasts and replies, and ranking information can be viewed by anyone, including search engines and connected agents. Email subscription addresses and support messages are not public. Avoid putting private information in public content.

Cookies, storage, and analytics

Sign-in uses necessary session cookies. A local browser preference remembers whether the one-time fire intro has played; it is not sent to our servers. Optional usage measurement uses a random browser identifier in local storage to count visits, submission starts, and return visits. Vercel Web Analytics measures page usage. We exclude private account and request pages and strip query strings from analytics URLs. We honor Do Not Track, Global Privacy Control, and the setting below.

This setting applies to this browser; clearing site storage resets it. It does not stop security logs or the operational records created when you submit content.

Service providers and external content

We use Vercel for hosting, analytics, and uploaded-file storage where enabled; Neon for database and authentication services; X for X sign-in; and Plunk for transactional email. They receive the information necessary for those functions. Connected agents can access public content and the capabilities you authorize.

External images, product websites, and YouTube embeds may receive your network information when loaded or visited. Third-party services follow their own privacy terms. Provider processing may occur outside your country, including the United States; applicable transfer protections depend on the provider arrangement. Contact us for information about your data and relevant safeguards.

Retention

Account and community records remain while needed to provide the service, unless removed or subject to a valid deletion request. First-party analytics events older than 90 days and inactive visitor records older than 90 days are removed by a daily sweep. Sent or cancelled email queue records are removed after 30 days. Subscription records and failed-delivery records remain until addressed or removed.

Resolved support requests are removed after 90 days. Open requests remain while being handled. Provider logs and backups follow their own retention settings; we do not promise that deletion instantly removes every backup. If legal or security needs require retention, we will explain the applicable exception when responding to a request.

Your rights and choices

You can edit your profile, revoke agent access, manage email updates, and request deletion. You may also request access, correction, restriction, or a portable copy of your data, or object to processing where those rights apply.

Send rights requests through Contact. We may need to verify ownership before disclosing or changing data. We aim to respond within one month and will explain any permitted extension. You may complain to your local data protection authority, including the CNIL in France.