Privacy

Last updated 5 November 2026

SaaS Outpost tracks public software products. Most of what we hold is about products, not people. This page lists the personal data we do hold, why, and how to have it removed. Questions or requests: info@saasoutpost.com.

If you have an account

• Your email address, if you sign in by email, and from GitHub, if you sign in with GitHub: your GitHub user id, username, display name, avatar address and verified email. We ask GitHub for nothing else and cannot see your repositories.
• Sessions: a cookie that keeps you signed in. We store only a hash of it, for up to 30 days. A second cookie holds your display name so the page header can show it.
• What you do here: listings you claim or edit, products you submit or save, disputes you raise, and whether you ticked the newsletter box.

We use these to run your account and nothing else. The basis is the contract with you (providing the account you asked for). Delete your account by emailing us from its address; we remove it, its sessions and saves within 30 days. Edits you made to a listing stay on the listing, without your name.

If you run a listed product

Our indexer reads each product's homepage (see About). From it we keep the product's name, description, icon and the links it publishes, including contact addresses shown on the site, such as hello@ or support@. We record which page each address came from. We do not buy lists, guess addresses, or collect them from anywhere other than the product's own site.

We may write to that address, one person at a time, about something specific we noticed, for example that the site has been failing our checks. Every such email says how we found the address and has an unsubscribe link. Unsubscribing, or replying to say no, stops all email from us to that address and to the product's domain, permanently. The basis is our legitimate interest in keeping listings accurate and telling makers about problems with their own sites; you can object at any time, and we will stop.

Everyone who visits

No analytics, no advertising and no tracking cookies. Like any website, our server and Cloudflare, which sits in front of it, log requests (IP address, page, browser) for security and to keep the site running. Those logs are kept for up to 30 days.

Who else handles it

• Cloudflare: network and DNS in front of the site.
• Resend: sends our email (sign-in links, claim checks, and the occasional email to makers).
• GitHub: only if you choose to sign in with it.
• OpenRouter: product homepages (public text, no personal data on our side) are sent to a language model to categorise products.

We do not sell or rent personal data, and never will.

How long we keep it

• Accounts: until you ask us to delete them.
• Sign-in links: expire after 15 minutes; used and expired ones are deleted.
• Contact addresses found on product sites: while the product is listed. We stop showing an address once it disappears from the site.
• Unsubscribes: kept for good, as the address or domain alone, so we can keep honouring them.
• A record of each email we send (address, subject, date): 2 years.

Your rights

You can ask for a copy of what we hold about you, for it to be corrected or deleted, or object to how we use it. Email info@saasoutpost.com and we will answer within 30 days. If you are in the EU or UK and are unhappy with our answer, you can complain to your data protection authority.