Private means private.

Draft controller details

The draft controller is Bc. Marek Klofera, IČO 21122709, Czech Republic. The registered business address, processing regions, and launch approvals must be verified before public use. Privacy and support requests should be routed to support [at] outscream [dot] lol.

What is public

Only an approved public Scream's text, optional display name/domain, publication information, and eligible paid loudness/positions appear publicly. Your verification email is not a public identity. There are no public supporter lists, view counters, profiles, or unique-person claims.

What the service needs privately

Email supports verification, one-Scream management, and approved safety communications. Tokens are purpose-scoped and short-lived; links put the credential in a fragment, remove it from the address bar, and keep it only in page memory. An explicit POST is needed to consume it. Verification and payment are not marketing subscriptions.

Safety checks use the approved moderation/policy and URL-reputation providers. The app does not fetch arbitrary destination pages or external user images. Stripe handles required billing data and payment receipts; Outscream retains minimal normalized financial evidence rather than raw payer payloads. Selected provider and processing terms remain part of the launch clearance.

Optional verified email updates

Email settings provides separate, accountless opt-in for World Today and All-time leader changes and for being passed or losing first place on up to 20 public Screams you choose to follow. Ownership and payment are not required. All new choices start unchecked; posting, paying or opening a link never enrolls you. The email provider processes your private address and the notifications you requested. These are distinct from receipts, verification, management access and necessary safety messages.

Email confirmation and management links are one-use and expire after 30 minutes. The email-settings session also lasts at most 30 minutes in a scoped HttpOnly cookie. Fragment credentials are scrubbed from the address bar and held only in page memory; an explicit confirmation POST is required. No email-setting credential is kept in local or session storage, and these private pages load no analytics.

You can disable individual choices, remove a followed Scream or stop all optional emails in Email settings. Email unsubscribe-only links last 30 days and require confirmation on the landing page; supported mail clients can separately send a one-click unsubscribe POST. Unsubscribe links cannot grant management access. Request a fresh management link to recover settings without changing preferences. Generic responses do not reveal whether an email is registered. Bounces, complaints or safety decisions can suppress delivery; confirmation and preference changes never automatically clear that suppression.

Optional updates use snapshots and may be corrected. They are coalesced to at most one email per hour, not sent for every event, and delivery is not guaranteed. A midnight UTC Today reset is not a defeat. Unsubscribing does not remove necessary transactional or safety communications.

You can also request one result for a followed Scream's selected current UTC day. Confirm before that day's midnight; this does not subscribe you to future days. After next-day 00:10 UTC, a snapshot may report its World paid position, an unranked outcome or free-only status. Later corrections may change public results; no correction email is sent. Daily snapshots and expired selected-day choices become eligible for cleanup after 30 days.

Functional storage

The current World stage does not ask for or save a Scream country preference, and does not use location hints to fill the composer.

Host-only private session/payment cookies authorize only their scoped actions. Management sessions last up to 24 hours, subject to applicable expiry and revocation. Same-tab session storage may keep a minimal intended-checkout identity, public Scream ID, scope, amount, and offer ID until a definitive outcome or your explicit choice to forget the local reminder. It prevents ambiguous retries from silently starting another purchase. It contains no email, bearer token, quote token, or payment-card details. Resume payment looks up an existing intent without a new quote or purchase, even after the Scream is hidden. Forgetting the reminder requires a warning and never cancels, refunds, or changes a provider payment.

A separate same-tab publication hint holds only a public Scream ID and an expiry of up to 24 hours, never a credential or email. It lets us show Share and Follow after actual publication once; it grants no access and is removed after that success is displayed.

A separate optional Follow return hint holds only a public Scream ID and a 30-minute expiry in this tab. It helps return from email confirmation to the selected Scream, grants no access or subscription, and is cleared after confirmation. It never contains your email, credentials or notification choices. General email settings do not automatically select a Scream from this hint.

Optional third-party analytics starts off

Third-party analytics requires an approved configuration and your explicitly saved consent where consent is required, including EU/EEA visitors. Direct GA4 is the lower-maintenance initial choice; Google Tag Manager should be used only if its container is audited and limited to the same narrow event list. Only one provider is used, never both. No tag or pre-consent ping is loaded on private, credential, composer, or payment-status pages. Navigation into those flows loads a fresh document.

If allowed, only explicit free-create, boost, or share intent actions are sent from eligible public pages. No automatic page/form/link tracking, ads, personalization, replay, view measurements, rank-change fanout, or browser-created purchases are enabled. No message, name, email, full URL/referrer, token, payment reference, or custom user identifier belongs in those events.

Google may create its own pseudonymous analytics cookie after consent; that is not anonymous data. Cookies and your consent choice last up to 30 days without automatic rolling extension. Use Privacy choices in the footer to reject or withdraw. Withdrawal stops events, erases only analytics cookies, and reloads a page that loaded a tag. Functional security/country cookies are separate.

Separate optional first-party funnel measurement

This measurement is disabled until separately approved and until you explicitly allow it in the first-party measurement choices. Its consent preference lasts up to 30 days. A separate random HttpOnly cookie identifies a fixed 24-hour browser session, without rolling renewal. The server stores only its hashed value. This is pseudonymous measurement, not an anonymous person count or cross-device identity.

Eligible public visits, Create clicks, displayed boost dialogs and Share choices can be linked to accepted drafts, actual publications and confirmed payment facts. Private forms never emit typing or analytics events; an already-consenting session may be linked at server-side draft or purchase-intention acceptance. No text, name, email, full URL/referrer, raw IP, verification credential or card data is collected for this measurement. Public links carry no measurement identifier. Demo/known automated traffic is excluded; source labels are unverified hints.

Measurement records and saved reports expire after 30 days through bounded cleanup. Withdrawing first-party consent stops collection and deletes the current session's measurement events and links, not required business or financial records. A hashed revocation marker is retained for 30 days to prevent delayed requests from recreating the withdrawn session. If deletion is temporarily unavailable, retry the visible withdrawal control. Previously expired sessions are not linked into a persistent browser identity; contact support for applicable data requests. Protected report exports require separate operator deletion. Google analytics consent and first-party consent are independent.

Small aggregate value, not views

When the required legal basis is enabled, qualifying outbound requests can be counted in daily aggregates and shown only to the owner as an approximate, non-unique total. Known crawlers, prefetches, and HEAD requests are excluded; this is not bot-proof or a count of people. When disabled or unavailable, the label says measurement unavailable, not zero. Nonpersonal share-source labels may only be x, linkedin, copy, or native.

Separately approved first-party measurement can also count explicit share choices and eligible arrivals from those four source-labelled links. These requests contain only the event category, source, and World scope with no country code. They do not contain a Scream ID, text, full URL, arbitrary query value, referrer, or visitor identifier, and do not create an analytics cookie. They are aggregate requests, not unique people, views, successful posts, or payment confirmations. Unlabelled visits and private pages do not send these source signals; canonical URLs stay clean.

Retention is bounded

Unverified drafts expire after 24 hours. Private rejected/review text is retained for at most seven days absent a documented lawful hold. Owner contact is retained while public and up to 30 days after hide for support, then erased absent lawful need. Expired/consumed credential hashes are purged within 24 hours.

For optional notifications, pending unverified addresses become eligible for cleanup after their last 30-minute verification link expires. Unsubscribed or suppressed contact addresses become eligible after 30 days with no live credential; active opted-in addresses remain while subscribed. Minimal consent evidence (keyed email digest, choices and timestamp) expires after 365 days independently of address deletion. Cleanup uses bounded scheduled sweeps, not guaranteed physical deletion at the exact deadline. Necessary keyed suppression evidence persists to prevent automatic reenrollment after address erasure; resubscription never clears it. These rules do not replace separate lawful financial or safety retention.

Reports are retained for 30 days after closure, no more than 90 days without a documented hold. Redacted operational logs last 14 days; short-lived abuse keys at most 48 hours; approved non-user aggregate product metrics at most 13 months. Backups use a seven-daily-backup window with deletion replay records for 35 days. Minimal financial references follow the actual reviewed statutory retention requirements.

Requests involving minors, disputed payment authority, safety reports, or suspected illegal content may require shorter public exposure, refusal, deletion, or lawful retention depending on the issue. Outscream is not designed to knowingly collect children's private data or to let minors make unsupported payments.

Provider identifiers and keyed digests are not automatically anonymous. Actual controller information, processing regions, deletion requests, lawful holds, and provider/property retention must be finalized before public use. See support and contact readiness.