Privacy Policy

Matej Matiaško (IČO 11716592, not a VAT payer), Sídl. E. Beneše 3916/21, 796 03 Prostějov, Czech Republic, runs outsize and is responsible for the data described here. The short version: we collect as little as we can, we don't use tracking or advertising cookies, and we don't sell data. Contact: support@outsize.app.

Visitors to the board

We count how people interact with each tile: views of the board, hovers, how long a hover lasted, whether the preview was shown, clicks, and promo code copies. These are stored only as daily totals per tile, which advertisers see on their dashboard, plus hourly totals for the last 72 hours that drive the board's colors and the market prices.

To avoid counting the same person twice and to stop abuse, the server computes an anonymous visitor id: a hash of your IP address, your browser's user agent and a random value that changes every day and is never written to disk. Your IP address isn't stored with the stats. The hashed id is kept for at most 30 minutes, for rate limits, and can't be linked across days. This works without cookies or anything stored in your browser.

Clicking a tile goes through a short redirect on our site (/go/…) so the click can be counted, then sends you straight to the advertiser's site. What happens there is covered by their privacy policy, not ours.

Advertisers

• When you buy a spot or a Boost, you pay through Polar, our merchant of record. Polar collects your payment details, billing country and email; we never see your card. Polar sends us your email and the order amount.
• We store your email with your spot to send you the “your spot is live” email with your private dashboard link, and to send the links again if you ask at /lost. Emails are sent through Resend. We don't send marketing emails.
• We store what you put on your tile (name, tagline, ticker, color, sector, promo code, link) and the amount paid. That content is public on the board while the spot is live. Your email is never shown publicly.
• We fetch the preview image from your site's Open Graph tags and store a copy on our server to show on the board.

Market players

Signing in to the market uses Clerk, which handles your account (email, name, and the sign-in method you choose, such as Google). We keep your Clerk user id, a public name (your first name and last initial, or a nickname you set), your play-money balance, trades, holdings and portfolio history. The public name appears on the leaderboard and live trade feed. Your email is never shown.

Cookies and browser storage

• We don't use analytics, advertising or tracking cookies.
• Clerk sets cookies needed to keep you signed in to the market. They are essential: sign-in doesn't work without them.
• We save two small settings in your browser's local storage: the board's color mode, and that you've seen our notice. They never leave your browser.

Who else handles data

• Fly.io: hosts the site and its database, in Amsterdam (EU). Their logs can include IP addresses.
• Polar: payments, tax and receipts, as merchant of record.
• Resend: sends our emails.
• Clerk: market accounts and sign-in.
• Vercel: domain registration and DNS.

Some of these companies are based in or use servers in the United States; they transfer data under their own safeguards, such as the EU Standard Contractual Clauses.

Why we may use this data

To provide what you asked for (your spot, its dashboard, emails about it, your market account), to keep records for tax and accounting, and our legitimate interest in counting real interest in tiles and preventing abuse.

How long we keep it

• Hashed visitor ids: up to 30 minutes. The daily random value: one day, in memory only.
• Per-tile stats: as long as the spot's record exists. They contain no personal data.
• Spot records and advertiser emails: as long as needed for the dashboard, support and legal bookkeeping.
• Market data: until you ask us to delete your account.

Your rights

You can ask us for a copy of your data, to correct it, or to delete it, and you can object to how we use it. Email support@outsize.app. If you're in the EU or UK, you can also complain to your local data protection authority.

outsize isn't meant for children under 16, and we don't knowingly collect their data. If this policy changes, the date at the top changes too. See also our Terms of Service.