Version 2026-08-28

Privacy

What we collect

For advertisers: the website address or social handle you submit, the brand details you submit (including the link to your logo — we store the URL, never a copy of the image), your email address, and the IP address and browser string at the moment you pay (kept as dispute evidence). Payment details go directly to Stripe and never touch our servers.

For visitors: page views and outbound clicks. Your IP is never stored — it is hashed with a salt that rotates daily, so the hashes cannot be linked across days. Raw event records are deleted automatically after 90 days; only aggregate counts are kept.

Analytics

Our own view and click counts are first-party, server-side, and set no cookies at all — they are the numbers published on /api/stats/public, and they are the only analytics that can tell an advertiser how their own day performed. We never publish anyone’s personal data.

We also run two visitor counters, Umami and Vercel Web Analytics. Neither one sets a cookie, neither follows you to other websites, and neither is given your name or your email. They count pages opened, roughly which country a visit came from, and which site you arrived from. We run two because ad blockers stop a large share of visits from being counted at all, and comparing the two tells us how large that share is.

We do not currently load Google Analytics. If we turn it on we will ask for your consent first, because it sets cookies, and this page will be updated and re-versioned before that happens rather than after.

Third parties

Stripe (payments), Resend (email), MongoDB Atlas (database), Vercel (hosting and its Web Analytics), Umami (visitor counts). Each processes data on our instructions only. Google Analytics is listed here as not in use — see above.

Your data

Advertisers can see and edit everything we hold via the management link in any receipt, and can request deletion from there. Note that payment history, amounts and rank records are published publicly for the life of the campaign, and are retained afterwards where accounting or tax law requires it.

You can also ask us for a copy of what we hold, ask us to correct it, or ask us to delete it, by contacting us. We answer every request. If you are in the UK or the EU, these are your rights under the UK GDPR and the GDPR respectively; if you are in California, the equivalent rights under the CCPA.

Who holds your data

The data controller is outdated.lol. Reach us any time at support@outdated.lol or through the contact form.