Privacy

Gus collects as little as he can get away with. The free check-up needs nothing from you at all — no account needed, no email required, no cookies. You can ask Gus to email a report to you, and if you do we use that address for that one email and nothing else. If you make an account, we keep your email address, the sites you choose to save, and your check-up history, because that's the product. Payments happen at Stripe, so your card never touches us. We don't sell data, we don't run ad trackers, and our analytics can't follow you around.

The data controller is Outwoods Technologies Limited, registered in England and Wales (company number 16382158, registered office 3rd Floor, 86‑90 Paul Street, London EC2A 4NE). Privacy questions go to hello@outwoods.tech.

Running a check-up sends Gus the website address you typed, and nothing else about you. Reports are saved so they can be shared by link; a report describes the website, not the person who asked. Our rate-limiting briefly processes your IP address to keep the free service fast for everyone — it isn't kept as part of any report.

Nothing on the free check-up asks for your email address. If you choose to give one — to have the report emailed to you, or to write to us — that's the only thing it's used for: sending you that report, or replying to you. It doesn't create an account, it isn't added to a mailing list, and no marketing follows it. Messages you send us are kept so we can answer them and remember we did.

We store your email address, a securely hashed password (we couldn't read it if we wanted to), the sites you attach, your check-up history, and — if you subscribe — your subscription's status. Emails Gus sends you are the ones you'd expect and nothing else: a confirmation link, password resets you ask for, and (for subscribers, to a confirmed address only) the daily change alert, each with a one-click unsubscribe for that site.

If you arrive from an ad or a link, the address you land on may carry campaign labels (the utm_ parameters, and a click id from Google or Microsoft). We read those from the address, count them in our analytics, and — if you go on to create an account — store them once against that account so we can tell which advertising actually pays for itself.

That's the whole of it. It says which advert or link you came from, not who you are: there is no cookie, nothing is stored in your browser, and nothing is shared with the ad platform beyond the click id it gave us in the first place, so none of it can be used to follow you anywhere else.

A short list, each doing one job: Microsoft Azure hosts Gus and stores the data above; Stripe takes payment (they hold your card details, we hold none); Resend delivers our email; PostHog (EU servers) gives us anonymous product analytics — no cookies, no session recording, no advertising identifiers, and events never contain your email address. We don't sell or share your data with anyone else.

Account data stays while the account does. Saved reports stay so their share links keep working. If you remove a site, its row leaves your list; if you want your account and its data gone entirely, email us and we'll delete it — the address above reaches a person, not a queue.

UK GDPR gives you the right to see the data we hold about you, correct it, take it away, or have it erased. Ask at the address above. If we've let you down, you can complain to the Information Commissioner's Office (ico.org.uk) — though we'd appreciate the chance to fix it first.