What we collect, and why.

This Privacy Policy explains how Outclaim.lol (https://outclaim.lol) collects, uses and shares information when you visit the site, click a listing, or pay for a position. It sits alongside our Terms of Service.

Who is responsible

The controller for personal data processed through the Service is KeyGrow, the company behind Outclaim.lol. Email: hello@outclaim.lol.

What we collect

We keep the Service small. We collect only what we need to run the boards, take payment, stop abuse and understand traffic.

• Public listing data. The brand name, handle, website, logo, tagline, claim amounts, ranks and ranking history you create are published on the boards, in the activity feed, in share images and in badges. Anyone can see them, including search engines.
• Email address. Used for confirmation and position alerts for the listing you paid for. Never shown publicly and never used for marketing.
• Checkout and payment data. Card details and billing identity are collected by Whop, not by us. Whop sends us confirmation that you paid, the amount, a payment id and, where you allowed it, the buyer email. We store those identifiers to place and support the ranking.
• Agreement record. That you ticked the agreement box, when, and which version of the Terms and Rules you accepted.
• Abuse prevention. A salted hash of your IP address and your browser's user agent are stored with each claim, plus short-lived rate-limit counters keyed by IP address.
• Audience counts. Your browser keeps two random ids in its own storage: a tab id (session storage) that expires when the tab closes, and a browser id (local storage). They are sent with a heartbeat so we can count how many people are online and how many distinct browsers visited today. They are random strings, not your name, and are never linked to a claim.
• Technical data. Standard request data such as user agent, referrer and IP address may be processed by our host (Vercel) to operate and secure the Service. Vercel Analytics gives us cookie-less, aggregated page statistics. Google Analytics 4 gives us aggregated usage and campaign statistics (pages viewed, referrers, rough location, device type); it sets cookies, described below, and Google processes that data under its own terms.
• Messages you send us. If you email a notice, a correction or a privacy request, we keep that correspondence as needed to respond and to keep a legal record.

Cookies

Outclaim.lol sets first-party analytics cookies through Google Analytics 4 (_ga and _ga_*), which recognise a returning browser for up to two years so repeat visits count as one visitor. They are not used to advertise to you on other sites. You can block or clear them in your browser, use an ad blocker, or install Google's opt-out add-on; the Service works the same without them. Whop's checkout may set its own cookies on whop.com. Your browser may store the random audience ids described above and a draft of the claim form (so a cancelled checkout doesn't lose your details); both stay on your device.

Why we use this data

• Contract. To take payment, create or raise a listing, show rank, render badges and share images, send position emails, and provide the Service you asked for.
• Legitimate interests. To keep the boards fair (rate limits, bot filtering, moderation), measure visits, debug outages and defend legal claims. You may object to processing based on legitimate interests as described below.
• Legal obligation. To keep tax, accounting and complaint records where the law requires it.

Who we share data with

• Whop — checkout, payment confirmation and payouts.
• Vercel — hosting, functions, analytics and image storage (logos).
• Google — Google Analytics 4 (aggregated usage statistics; Google may process this data on servers outside your country, including the United States).
• Neon — the database that holds listings, claims and emails.
• Upstash — short-lived counters for online/visitor numbers and rate limits.
• Resend — delivery of position emails.
• Professional advisers, authorities or a buyer of the Service if we must share data to comply with law, enforce the Terms or transfer the project.

We do not sell personal data. Some processors are outside your country; where we rely on them, we use the safeguards they provide, such as standard contractual clauses.

How long we keep it

• Public listing entries stay while the listing is on a board and may remain in backups or activity history after a takedown for a limited time.
• Payment identifiers, amounts and agreement records are kept as long as needed for accounting, tax, fraud and dispute handling.
• IP hashes and rate-limit counters are kept only as long as useful for abuse prevention.
• Audience counters roll over daily; the daily unique-visitor estimate is kept for up to 40 days.
• Emails stay with the listing. Ask us to remove the listing and we remove the address with it, keeping a suppression note so we do not email you again by mistake.

Your rights

If the GDPR, UK GDPR, CCPA or similar law applies to you, you may ask us to access, correct, delete or export personal data we hold about you, to restrict or object to certain processing, and to lodge a complaint with a supervisory authority. Email hello@outclaim.lol from the address used at checkout. Public listing content that is also on your own website is not made private just by appearing on the board; you can ask us to remove the listing.

Children

The Service is for adults and businesses. We do not knowingly collect personal data from children. If you believe a child has used the Service, contact us and we will delete the data we can identify.

Changes

We may update this policy when the Service or the law changes. The date at the top of this page is the current version.