Your data, kept to the minimum.

What is collected and why

• Account: your email address, an optional display name and your preferred language — to sign you in and to write to you about your account.
• Sign-in and security: one-time codes, stored only as a hash and valid for ten minutes. For each session: browser and operating system, IP address, sign-in time and last activity — to protect the account and to show you where you are signed in.
• Notifications: messages in your account inbox, their delivery status and the channels you chose.
• Payments, once available: orders and subscription status. Card details are entered on the payment provider’s page and never reach this platform.
• This website: reader statistics through Google Analytics, only if you say yes. They show how many people visit, where they come from and which pages they open; your name and email never reach them. No advertising or ad tracking. Server logs with IP addresses are kept for a short time for security and troubleshooting.

Cookies

• og_locale — your language for all outegro.dev sites, kept for one year.
• og_at and og_rt — your session in a platform app such as id.outegro.dev, and on outegro.dev itself once you sign in from its header (or automatically, see og_hint). They are HttpOnly, so scripts cannot read them, and live for five minutes and thirty days respectively.
• og_hint — a note that this browser is signed in at id.outegro.dev. It is set for the whole .outegro.dev domain, so the other platform sites can let you in without signing in again. It holds no personal data, just “1”; it lives as long as your session at id.outegro.dev and is removed when you sign out.
• og_silent — each site’s own note about automatic sign-in: “tried” for five minutes after an attempt (a day if the attempt failed for a reason that would repeat); “silent” while a session opened automatically lives, and that session ends together with your session at id.outegro.dev; “out” for a year after you sign out yourself or a session is revoked, so the site never lets you back in without you.
• og_sso — a sign-in in progress: a one-time check and the page to return to. It lives for ten minutes and is deleted as soon as sign-in is complete.
• og_gate — a note that you skipped the opening animation (a click or Esc): it stays away until you close the browser.
• og_consent — your answer about statistics: granted or denied. Kept for one year, on outegro.dev only.
• _ga and _ga_<number> — Google Analytics cookies: a random browser number that ties visits to one reader. They are set only after you say yes, last up to two years from your last visit and are deleted if you change your mind.
• Cloudflare, which delivers the sites, may set its own security cookies such as __cf_bm to tell people from bots.
• All of these except _ga are needed for the sites to work and need no consent. The site asks about statistics separately, in a note at the bottom of the page.

Who else processes data

• The hosting provider of the server the platform runs on.
• Cloudflare — every request passes through its network, which protects the sites from attacks and delivers them; it also runs the domain name system and stores encrypted backups.
• Resend — email delivery.
• Google — sign-in with Google, only if you choose it. It shares your email address, name and whether the email is verified.
• Google — reader statistics for outegro.dev through Google Tag Manager and Google Analytics. The Tag Manager loader comes from Google’s servers on every page but sets no cookies itself; Google Analytics starts only after you say yes. Google Analytics does not store IP addresses, and Google may process the data in the United States and other countries.
• Telegram — only if you link it for notifications.
• Lava — payment processing, once payments are available.

How long it is kept

• Account data stays until you ask to delete the account.
• Sign-in codes expire after ten minutes. Ended sessions and security records are kept for a limited time to investigate misuse.
• Google Analytics data tied to a browser number: 14 months, after which only aggregate figures remain.
• Your answer about statistics: one year; when it expires, the site asks again.
• Backups are encrypted and replaced on a rolling basis.

Your choices

• Change your name and language, end sessions and choose notification channels in your account at id.outegro.dev.
• Change your mind about statistics at any time in the statistics settings below. Once you say no, Google Analytics no longer starts and its cookies are deleted. You can also block cookies in your browser or use a content blocker: the site works fine without statistics.
• To get a copy of your data or to delete your account, write to the address below. Requests are answered within 30 days.

Changes

• If this policy changes in a meaningful way, signed-in users get a notice in the account inbox before the change takes effect.

Statistics settings

Questions and requests

coping.barrel@gmail.com