Skip to content

Privacy policy

Who we are

Outreach Ratings is run by Infinite Lives Group, Weston-super-Mare, North Somerset, UK. We are the controller for the personal data described here. Contact us at 1up@infinitelives.co.uk.

What we hold

  • Member accounts: username, email address, password (stored hashed), the blog you verified and the page carrying our link.
  • Ratings members submit: the rated email address, the outcome, an optional deal date and private notes, and any evidence uploaded.
  • Listed email addresses: stored as a one-way code for lookups, plus an encrypted copy.
  • Claimed addresses: your reply, dispute messages, and any public profile details you choose to add.
  • Technical data: lookup counts and short-lived rate limit records based on your IP address.

Why we use it

We rely on legitimate interests: helping bloggers avoid unpaid work and recognising reliable payers. We have balanced this against the interests of listed people by requiring verified members, requiring evidence for non-payment, not letting anyone browse the list, and giving every listed person a right of reply and dispute. Member account data is used to provide the service you signed up for.

Who can see it

  • Anyone can see the score for an email address they already know.
  • Verified members also see the breakdown by outcome.
  • Pro members can export low-rated addresses for their own email filters.
  • Evidence and private notes are seen only by moderators.
  • We do not sell data.

Who we share data with

We do not sell, rent or trade personal data, and we never share it for advertising. We only pass data to these service providers, and only what each needs to run the site for us:

  • 20i, our UK web host, which runs the server and database the site uses.
  • PayPal, which takes Pro payments and dispute fees. We never see your card or bank details.
  • Our email delivery service, which sends account emails such as claim links, warnings and alerts.
  • Google Fonts, as described under cookies below.

We also disclose data if the law requires it, for example a court order. Data from the Gmail side panel is covered separately below: it is not shared with anyone.

How we protect your data

  • Every connection to the site, the side panel and the extension is encrypted with HTTPS (TLS), and browsers are told to always use HTTPS.
  • Email addresses on the list are stored as a one-way code (HMAC-SHA256) for lookups, plus a copy encrypted with AES-256. They are never shown as a list.
  • Passwords are stored only as a salted hash. Side panel and extension keys are stored only as a one-way code, so even we cannot read them back.
  • Evidence and private notes can only be opened by moderators, and only signed-in administrators can reach the admin area.
  • Rate limits, security headers and up-to-date software protect the site against abuse.
  • If a breach ever puts your data at risk, we will tell you and the Information Commissioner’s Office as UK GDPR requires.

How long we keep it

Member data is kept while your account is open. Ratings stay while they remain part of a buyer’s payment record, and we remove them when a member deletes them, a dispute is upheld, or they no longer serve a purpose. Evidence is deleted when its rating is deleted.

Your rights

Under UK GDPR you can ask for a copy of your data, ask us to correct or delete it, and object to our use of it. Email us with the subject “Data request”. If you are unhappy with how we handle your data, you can complain to the Information Commissioner’s Office at ico.org.uk.

Cookies and similar

We use cookies only to keep you signed in. Your browser also stores your light or dark mode choice. The site loads fonts from Google Fonts, which means your browser connects to Google’s servers.

Gmail side panel and Chrome extension (Pro)

Pro members can see ratings inside Gmail with our side panel add-on, our Chrome extension, or both. Each is connected with a personal key you make on your dashboard. We store only a one-way code of that key, and you can disconnect it at any time from Pro tools.

  • Side panel (Gmail add-on). When you open an email, the add-on reads the sender’s address of that one email, using Google’s “current message metadata” permission. It sends that address and your key to outreachratings.com to look up the rating. It does not read, store or send the body, attachments or any other email. Your key is kept in your Google account’s storage for the add-on.
  • Chrome extension. The extension reads the sender addresses shown on the Gmail page, inside your browser. Once an hour it downloads a list of rated addresses as one-way codes, with their scores, and matches senders against it on your computer. Nothing from your inbox is sent to us or anyone else, and the downloaded list cannot be read back as email addresses. Your key and the list are stored only in the extension on your computer.
  • We use what the add-on sends only to show you the rating, count lookups and apply fair-use limits. We do not keep a record of which addresses you looked up, do not use it for advertising, do not sell it, and no person reads it.
  • Sharing Google user data. We do not share, transfer, sell or disclose the data the side panel receives from Google with anyone. It is used only on our own server, run by our web host 20i, to show you the rating, and is disclosed only if the law requires it.
  • Protecting Google user data. The sender address and your key travel to us over encrypted HTTPS. We check the key against its stored one-way code, look up the address and send back the score. The address is not saved to our database. Like every web request, it can appear in our host’s standard server logs, which are kept only for a short time for security.
  • We do not use Google user data, or any data from Google Workspace APIs, to develop, improve or train generalised or non-personalised AI or machine learning models.
  • Outreach Ratings’ use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
  • To stop, press Disconnect under Pro tools, remove the add-on from Gmail’s settings, or remove the extension from your browser. Disconnecting stops the key working straight away, and removing the extension deletes the key and list it stored.