Legal & data

    Privacy & Data Handling

    How we handle submissions, what we publish, what we remove, how long we keep it, and how to request removal. Plain language. No boilerplate.

    Last updated: April 2026 · Questions: privacy@youroutreachsucks.com
    // Redaction

    What we remove before publication

    Every submission is redacted before review. Redaction is permanent - we do not retain the original identifying information after the redacted version is created.

    Always removed
    Sender's name and surname
    Company name and URL
    Email address and domain
    LinkedIn profile URL
    Phone numbers
    Any reference to the recipient's name or company
    Job title if it would identify an individual
    Geographic location details
    Product names specific enough to identify sender
    What survives
    Message structure and phrasing
    Generic role descriptor (e.g. "SDR")
    Industry category (e.g. "SaaS")
    Channel type (email, LinkedIn, SMS)
    Approximate date range
    Offense pattern and taxonomy tags
    Score and verdict

    We replace removed content with generic placeholders - [Company], [Name], [Product] - to preserve message structure for analysis without exposing identity.

    // Publication

    What we publish and why

    Published cases contain the redacted message text, the offense taxonomy breakdown, the score and its computation, a structural analysis, and a rewritten version. No published case can be traced back to the sender with the information we include.

    Do you publish every submission?
    No. Publication is at our discretion. We prioritize cases with instructive or unusual patterns. Most submissions that don't get published are never reviewed - they are deleted.
    Can I submit on behalf of someone else?
    Yes, if the message was sent to them and they consent. You should not submit messages that were not sent to you or someone who explicitly asked you to submit on their behalf.
    Is submitting legal?
    Publishing commentary and criticism of unsolicited commercial messages is generally protected. We are not lawyers and this is not legal advice.
    Will the sender know?
    We do not notify senders when a case is published. We do not contact the sender at any point. The redaction means there is no realistic mechanism by which a sender would identify their own message in our archive.
    // Retention

    How long we keep data

    Submissions that are not published are deleted within 30 days of receipt. Published cases remain in the archive indefinitely - they are the record the site exists to maintain.

    🔒
    The permanent redaction guarantee

    Once a case is published in redacted form, the original identifying information is not retained anywhere in our systems. We cannot "unredact" a published case - the original data no longer exists. This is intentional and permanent.

    📧
    Email notification data

    If you provided an email when submitting, we store it solely to notify you when your case is published. After notification, your email is deleted. If your case is not published within 90 days, your email is deleted regardless.

    // Your rights

    Removal requests

    If you believe you are the sender of a published case and you can demonstrate this without us having to de-anonymize the record, you may request removal. We will review and respond within 14 days.

    Note: Because we do not retain original identifying information, we cannot verify most removal requests by matching against original data. We evaluate requests on the plausibility of the claim and the public interest in maintaining the record.

    Submit a removal request

    We respond to all requests within 14 days. Removal is not guaranteed but every request is reviewed.

    // Tracking

    Cookies & analytics

    Do you use cookies?
    Minimal. We use a single analytics cookie to count page visits. No cross-site tracking. No advertising cookies. No fingerprinting.
    Do you sell data?
    No. We do not sell, share, or monetize any user data. The site has no advertising and no commercial data relationships.
    Third-party services?
    We use a self-hosted analytics tool (no third-party data sharing) and a transactional email service for case notifications. Neither has access to submission content.