Privacy Policy

Last updated: July 2026

BLACKOUT is a threat intelligence platform that documents what marketing technology vendors actually do at runtime. We built this to shine light on undisclosed data collection. We're not about to engage in the same behavior ourselves.

TL;DR

We collect your email for account access and service delivery. We don't track you, sell your data, or build profiles on you. Intelligence we provide is about vendors, not about you.

ZERO trackers on this site. We use Plausible for privacy-friendly analytics. No GA. No Meta Pixel. No session replay. Practice what you preach.

Data collection

What We Collect

Account Information

Email address for authentication (sign-in is passwordless — we email you a one-time link). Payment details processed by Stripe (we never see full card numbers).

Usage Data

Which features you access, search queries within our platform, and export activity — to improve the product and provide support.

Continuous Monitoring Targets

If you opt in, the domains you request monitoring for (must be properties you own/operate).

Never collected

What We Never Collect

Your browsing activity

We don't track what you do outside our platform

Third-party tracking data

No pixels, no ad networks, no data brokers

Behavioral profiles

We don't build profiles on you or your company

Cross-site identifiers

No fingerprinting, no persistent tracking IDs

Intelligence about YOU

Our intel is about vendors, not subscribers

Data you don't give us

No scraping, no purchasing from data brokers

Data usage

How We Use Your Data

Permitted uses
  • Authenticate you and manage your subscription
  • Deliver intelligence products (reports, alerts, database access)
  • Process payments via Stripe
  • Provide customer support
  • Improve our detection capability and threat intelligence
  • Send service notifications and product updates (unsubscribe anytime)
Data sharing

Data Sharing

We do not sell, rent, or trade your personal information. We share data only with:

  • SupabaseDatabase + object storage (SOC 2)
  • VercelApplication hosting
  • Fly.ioScanner runtime + HAR processing (SOC 2)
  • AnthropicBrief generation (structured context only — no raw HAR, cookies, or auth headers)
  • ResendTransactional email (alerts, digests)
  • StripePayment processing
  • PlausiblePrivacy-friendly analytics (no personal data)
Retention

Data Retention

Active

Account data retained while subscription active

30 days

Post-cancellation before account deletion

On request

Immediate deletion available anytime

Your rights

Your Rights

  • Access: Request a copy of your data
  • Correction: Update inaccurate information
  • Deletion: Request account and data deletion
  • Portability: Export your data in standard formats
  • Objection: Opt out of marketing communications

To exercise any of these rights, contact privacy@deployblackout.com

Contact

Questions about this policy?

privacy@deployblackout.com

BLACKOUT // GTM Threat Intelligence