outcomeryOutcomery · legal
Privacy notice
The short version: we keep what you paste, not who pasted it. If you leave an email, it sits in a separate table that shares nothing with your KR. No accounts, no cookies, no ads, and we never sell anything about you.
Last updated 26 September 2026
Who runs Outcomery
Outcomery is run by Georges-Alexandre Hanin, an individual based in Philadelphia, Pennsylvania, USA. He decides how your data is used (under European law, he is the “controller”). To reach him about anything on this page, use the contact form and choose “A privacy request”.
What we store, why, and for how long
| What | How long | Why | Legal basis (for Europe) |
|---|---|---|---|
| The Key Result you paste, the verdict, finding and rewrite we send back, the name of the AI model, and the week. | 24 months. After that, only weekly counts of verdicts. | To give you a verdict, to improve the tool, and to publish anonymous statistics and rewritten examples about KRs. | Providing the service you asked for; our legitimate interest in improving it and in publishing research that identifies no one. |
| Your email address, if you leave one, with the week you signed up and which version of the signup text you saw. Once we email you: whether you open each email and which links you click. | Until you leave the list. If we never email you, 12 months after the week you signed up; otherwise 12 months after the last email we sent you. | To tell you when a new tool ships. | Your consent. You can withdraw it at any time. |
| A scrambled code made from your IP address. | Deleted after one hour. | To allow each visitor 5 inspections, 5 email signups, 5 unsubscribes and 5 contact messages an hour, and stop abuse. | Our legitimate interest in keeping the tool available and its costs under control. |
| Page visits: the page, the time, the site you came from, your country and city, and your device and browser type. No cookies, and no IP address is stored. To stop being counted, open any page with ?count=off added to its address: your browser keeps a small note, and your visits are no longer counted. ?count=on undoes it. | Shown to us for 12 months. Vercel may keep it longer. | To know which pages people read and where they came from. | Our legitimate interest in understanding how the site is used, without identifying anyone. |
| Messages sent through the contact form: your email and what you wrote. | 12 months. Privacy requests are deleted as soon as they are handled. | To answer you. | Our legitimate interest in replying, or taking the steps you ask for. |
| Request logs kept by our hosting provider (your IP address, the page asked for, your browser type and the time) and our database provider (the time our server wrote to it, and your email address if you unsubscribe). | Hosting provider: about 30 days. Database provider: up to a day. | Security, and keeping the site running. | Our legitimate interest in a secure, working service. |
Your KR and your email never meet
This is how the database is built, not only a promise about our intentions:
- An inspection and an email signup travel on separate requests, to separate tables that share no key.
- A KR and an email are each dated only to the week.
- Neither the KR table nor the email table stores your IP address, a session, or anything that identifies your browser.
The honest limits:
- Our hosting provider’s request logs hold your IP address and the time of each request for about 30 days, but never the text of your KR or your email address. Our database provider’s logs hold the time for up to a day and, if you unsubscribe, your email address too, for up to a day.
- Databases quietly keep track of the order in which rows were saved. Every night we rewrite that bookkeeping so every row looks saved at the same moment. Until that runs (at most a day), and in any recovery copy our database provider made before it ran, the order is still there.
- What you paste can identify someone if it names them. That is why we ask you to leave company and people names out.
Past those limits, nothing in our database connects your email to your KR.
Who else handles your data
We use a small number of providers, each only for the job below:
- Anthropic writes the verdict. It receives the KR you paste, keeps it for up to 30 days for safety monitoring (longer only if it is flagged as breaking Anthropic’s usage policy), and does not use it to train its models.
- Vercel hosts the website and counts page visits (Vercel Web Analytics, without cookies).
- beehiiv sends our emails. It holds your address, and shows us whether you open our emails and click their links. We don’t use beehiiv’s ad network, and we don’t pass our subscribers to other newsletters. For anything beehiiv does for its own purposes, beehiiv’s privacy policy applies.
- Supabase hosts the database, in Oregon, USA.
- Upstash hosts the hourly counter that limits inspections.
Where your data is
Outcomery is run from the United States. Our database is in Oregon, USA, and our other providers process data mainly in the United States. If you are in Europe, that means your data leaves Europe when you use the tool.
What we don’t do
- No cookies, no advertising, no tracking across other websites. Page visits are counted without cookies and without storing your IP address.
- We don’t sell your personal information or share it for advertising, and no other company follows your activity across websites through Outcomery.
- Because nothing follows you across websites, a browser’s “Do Not Track” signal changes nothing here. Page-visit counts are anonymous either way.
- We never put your KR or its verdict in a web address, so page-visit counts can’t contain them.
- We never publish a KR word for word, and never in a way that identifies you, your company, or anyone named in it.
Your rights
You can ask to see the personal data we hold about you, correct it, delete it, receive a copy of it, or object to how we use it.
You can leave the email list at any time on the unsubscribe page: one field, one click, no questions. Every email we send will also carry a one-click unsubscribe.
Send any request through the contact form, choosing “A privacy request”. We answer within 30 days. To delete a KR, paste its text exactly: we never stored who sent it, so the text is the only way to find it.
If you are in the European Union, you can also complain to your country’s data protection authority. The European Data Protection Board keeps the list of authorities.
Age
Outcomery is for adults using it for their work. It is not meant for anyone under 18.
Changes to this notice
When this page changes, the date at the top changes with it. If we ever want to use your email for something new, we will ask you first.