What we collect, which is very little, and what happens to it. No analytics, no trackers, no advertising.

OutManage is run by TBD, who is the data controller for everything described here. Privacy questions and requests go to TBD.

The short version: the study guides, blueprints, articles and practice questions are static pages. You can read and use all of them without giving us anything, and we do not run analytics, advertising, or session recording on any of it.

What we collect

Your email address, if you join the mailing list. The form asks for an address and, optionally, your role. The role field is there so we know which guides to write next; leave it blank and nothing breaks.

Your email address, if you create an account. Sign-in is a magic link, so there is no password — we never hold one, and there is nothing to reset or leak.

That is the complete list. We do not ask for your name, employer, payment details, or anything else, because we have no use for them.

What we do not collect

Your practice answers. The practice runner works entirely in your browser. Which options you pick, how long you take, and what you score are held in the page while you use it and are gone when you close the tab. None of it is transmitted to us, and we could not show you your own history if you asked.

Anything about how you browse. No analytics product, no advertising pixel, no tag manager, no fingerprinting, no session replay. The fonts are served from this domain rather than from Google, so loading a page contacts no third party at all.

Cookies and local storage

We set one kind of cookie: the session cookie Supabase uses to keep you signed in. It is set only after you ask for a sign-in link, and it exists solely to keep you logged in. There are no analytics or advertising cookies, which is why this site has no cookie banner — there is nothing to ask you to consent to.

Your colour-scheme choice is kept in your browser's local storage under outmanage-palette and outmanage-theme. That never leaves your device and is not sent to us.

Who else handles it

Supabase stores the mailing list and the account records, and sends the sign-in emails. Data sits in the TBD region.

TBD serves the site and, like any web host, records requests — IP address, timestamp, page, user agent — in operational logs used to keep the service running and diagnose faults.

Nobody else. We do not sell, rent, share, or trade your address, and we do not load a third party's script that could collect anything behind our back.

Why we are allowed to hold it

For the mailing list, your consent, given by submitting the form. For an account, performance of the service you asked us to provide. For request logs, our legitimate interest in operating a working website securely.

How long we keep it

Mailing-list addresses until you ask to come off the list. Account records until you ask us to delete the account. Host request logs for as long as TBD retains them under their own policy.

Getting off the list

Email TBD and you are removed — no confirmation loop, no retention period. We have not yet sent a single mailing; when we do, every message will carry a one-click unsubscribe link.

Your rights

You can ask us for a copy of what we hold about you, ask us to correct it, ask us to delete it, ask us to export it, object to our processing it, or withdraw your consent at any time. Email TBD and we will act within one month.

If you think we have handled your data badly, you can complain to TBD. We would rather you told us first so we can fix it, but that is your call, not a condition.

Children

This site is written for working managers and is not directed at children. We do not knowingly collect anything from anyone under 16.

Changes

If this policy changes materially we will change the date at the top of the page, and if the change affects people already on the mailing list we will say so in an email rather than quietly editing the page.