Privacy

Three Numbers collects as little as it can get away with. If you make an account, we keep your email address and your credits, because that's the product. Payments happen at Stripe, so your card never touches us. We don't sell data, we don't run ad trackers, and our analytics can't follow you around.

The data controller is Outwoods Technologies Limited, registered in England and Wales (company number 16382158, registered office 3rd Floor, 86-90 Paul Street, London EC2A 4NE). Privacy questions go to hello@outwoods.tech.

We store your email address, a securely hashed password (we couldn't read it if we wanted to), and a record of your credits: what you bought, were given and spent. Emails we send you are the ones you'd expect and nothing else: a confirmation link, password resets you ask for, and a warning a month before any credits expire.

So that each person gets one free first report, we keep a fingerprint of your email address once the free credits are given: a keyed hash, which can't be turned back into the address. We keep it for as long as the service runs, so the free report can't be claimed twice. Before comparing, we ignore capital letters, anything after a plus sign, and the dots in a Gmail address.

If you write to us through the contact page, we keep the message so we can answer it and remember that we did. Writing to us doesn't create an account and doesn't add you to any list.

If you arrive from an ad or a link, the address you land on may carry campaign labels (the utm_ parameters, and a click id from Google or Microsoft). We read those from the address, count them in our analytics, and — if you go on to create an account — store them once against that account so we can tell which advertising actually pays for itself.

That's the whole of it. It says which advert or link you came from, not who you are: there is no cookie, nothing is stored in your browser, and nothing is shared with the ad platform beyond the click id it gave us in the first place, so none of it can be used to follow you anywhere else.

A short list, each doing one job: Microsoft Azure hosts Three Numbers and stores the data above; Stripe takes payment (they hold your card details, we hold none); Resend delivers our email; PostHog (EU servers) gives us anonymous product analytics — no cookies, no session recording, no advertising identifiers, and events never contain your email address. We don't sell or share your data with anyone else.

Account data stays while the account does. If you want your account and its data gone entirely, email us and we'll delete it — the address above reaches a person, not a queue.

UK GDPR gives you the right to see the data we hold about you, correct it, take it away, or have it erased. Ask at the address above. If we've let you down, you can complain to the Information Commissioner's Office (ico.org.uk) — though we'd appreciate the chance to fix it first.