Privacy Policy

1. Information we handle

When you submit a product, we store the submitted and normalized destination, its public domain or social handle, and public metadata we retrieve from that destination, such as a title, description, favicon, or social image. We also store placement amounts and status, Paddle transaction references, timestamps, and operational records needed to prevent duplicate processing.

When someone follows a leaderboard link, we record the destination, time, and limited referral information. We may derive a short-lived, privacy-preserving visitor hash to reduce duplicate or abusive click counting. We avoid storing raw IP addresses when they are not necessary.

2. Payments

Paddle processes checkout and payment information as merchant of record. Outpay does not receive or store full card numbers. Paddle may collect contact, billing, tax, device, and payment information under its own privacy terms and legal obligations. We receive transaction identifiers, status, amount, currency, and related payment metadata needed to fulfill and reconcile your placement.

3. Why we use information

We use information to validate submissions, prevent duplicates and unsafe network access, retrieve public metadata, create and verify payments, calculate rankings, redirect and count outbound clicks, detect abuse, resolve support issues, and meet financial or legal obligations. We do not sell personal information or use product submissions to build advertising profiles.

4. Sharing

Public product information, ranking amounts, and aggregate click counts appear on the public leaderboard. We share data with service providers only as needed to run Outpay, including Paddle for payments and our hosting, database, security, and observability providers. We may disclose information when required by law or to protect users, the public, or the service.

5. Retention and security

We retain public placements and payment records for as long as needed to provide the leaderboard, handle reversals, prevent fraud, and meet accounting or legal obligations. Short-lived anti-abuse data may be retained for less time. We use access controls, encrypted connections, signature verification, and restricted credentials, but no online service can guarantee absolute security.

6. Your choices

Depending on your location, you may have rights to access, correct, delete, restrict, or object to certain handling of personal data. Public metadata may also be refreshed from its source. Send requests to hello@outpay.lol. We may need information that reasonably verifies the request and your relationship to the submitted destination.

7. Updates

We may revise this policy when our practices or legal requirements change. The revision date appears above. Contact hello@outpay.lol with privacy questions.