Privacy
Last updated 13 October 2026
What we collect
Your email when you create an account or join the weekly list. The cases you save, your plan, and any API key issued to you (stored hashed). If you claim a case, what you send with the claim. If you continue with Google, we ask it only for your verified email and keep nothing else from it. We do not ask for your name, and the service is not for anyone under 16.
Payments
Lemon Squeezy is the merchant of record: it takes payment, collects tax and keeps the billing details under its own privacy policy. We never see your card; we receive your plan, its status and a customer reference.
Analytics
We use Vercel Web Analytics and Speed Insights to count page views, clicks on join and upgrade buttons, and load times. They use no cookies and do not identify you. If you arrive through a tagged campaign link, one first-party cookie remembers which campaign it was for 30 days, along with the ad click ID if you came from an ad, so we can tell which channels bring sign-ups. We use no ad pixels or third-party trackers, with one exception: if you arrive through a partner link (one ending in ?aff=), Lemon Squeezy's affiliate script records that visit and sets a cookie so the partner is credited if you subscribe.
Ads on Meta and Reddit
This runs only while we advertise there. If you arrive from an ad on Meta or Reddit, our server tells that platform when you sign up or subscribe, using only the ad’s click ID and your browser type, so we can measure the ad. Never your email, name or IP address. There is no ad pixel in your browser. Opt out here, or with Global Privacy Control.
Where it lives
The site runs on Vercel. Accounts and saves are stored with Supabase. Emails are sent with Resend. When a Pro member describes an idea on Odds, the text goes through OpenRouter to a model provider that does not train on it, only to pick filters; we keep a fingerprint of the text, not the words. These providers process data on our behalf, under their own security terms, and may store it outside your country.
What we never do
We do not sell personal data, show ads on the site, or share your email with anyone but the providers above.
Emails we send
Sign-in links, a welcome when you join, and notes about your plan: when it starts, renews or ends. These come with the account. The weekly list of new cases goes only to addresses that joined it. Product news, below, goes only to people who said yes. Both carry a one-click unsubscribe.
How long we keep it
Account data stays while your account exists and goes when you delete it. We keep a short log of sign-in link requests to stop abuse. Payment records stay with Lemon Squeezy as tax law requires.
If we emailed you
We found your work address on a public professional page, named in our email. We write to people about their work, under legitimate interest. We keep only your name, work email, employer, the page where we found you and the dates we wrote. To object, reply “no” or write to hello@howitspread.com, and we delete it and stop.
Product news
Only if you tick the box when you sign up, or turn it on in Account. We keep a record of when you said yes or no and the exact words you saw. Every email has a one-click unsubscribe.
Your choices
Delete your account yourself from Account: it cancels any subscription, takes you off both email lists and removes your saves, collections, consent records and API keys. Funnel counts stay, no longer linked to you. To get a copy of your data or correct it, write to hello@howitspread.com. We answer within 30 days.