Privacy Policy

1. General

1.1 The Service is operated by two private individuals and not by a registered company. It is available at askyououtt.com and allows a user to create a private page inviting another person on a date, and to send that page as a link.

1.2 This Policy applies to the website, to every page created through it, and to the email messages the Service sends.

1.3 For any question or request concerning this Policy or the information held about you, write to [email protected].

2. The information we collect

2.1 Information provided by the creator of a page, when the page is published. Nothing entered in the creation form is sent to us before the creator publishes the page:

• An email address. Mandatory, and used solely in order to notify the creator that the recipient has answered. It is not displayed on the page, is not contained in the link, and is not sent to the recipient.
• The creator's name, as entered.
• The first name of the person being invited, where the creator chooses to enter one.
• The contents of the invitation: the proposed date, the accompanying message, the game selected, and the days marked as available.

2.2 Information concerning another person. A page may contain the first name of the person invited. That name is provided by the creator of the page; it is not obtained by us from any other source, and the creator is responsible for the details entered. We collect no further information about the recipient, including no email address and no telephone number.

2.3 Information recorded automatically during use of a page:

• Whether the page was opened, whether the game was completed, and the answer given - yes or no.
• Where the answer was positive, the days selected.
• A limited record of actions taken within the game, displayed to the creator on their private results page.
• Technical details: the date and time of each of the above stages, the language of the page, and the game selected.

2.4 IP address. Every request to the Service carries the sender's IP address. It is used for one purpose only - limiting the number of requests in order to prevent abuse and the automated creation of pages - is held in the server's memory for up to one hour, and is not written to our database and not associated with any page.

2.5 Information we do not collect: no user account and no password; no payment details of any kind - where publishing a page costs money, the payment is made on the site of Lemon Squeezy, which sells the page to the payer as merchant of record; Lemon Squeezy's notice to us that the payment was made includes the payer's name and email address, which we do not store, and we keep only the order number, the amount and the game, never the payer's name, address, email or card; no location data; no special categories of personal data; and no information obtained from any external source.

3. Use of the information

3.1 The information is used for the following purposes only:

• Creating and displaying the page and operating the game within it.
• Sending the creator an email message when the recipient declines, or when the recipient accepts and selects the days that suit them, and a further message if the recipient later changes that answer.
• Displaying the private results page to the creator.
• Displaying, where the creator chooses to share it, a page setting out the outcome of the invitation, as described in clause 5.4.
• Producing anonymous aggregate statistics - the number of pages created, published, opened and answered - in order to assess the operation of the Service.
• Preventing abuse and limiting the volume of requests.
• Responding to enquiries and requests addressed to us.
• Complying with the law and with the directions of a competent authority.

3.2 The information is not used for any other purpose, and in particular is not used for advertising, for profiling, or for any automated decision-making concerning a person.

4. Consent and provision of the information

4.1 There is no legal obligation to provide the information, and its provision is voluntary; however, without an email address and the details of the invitation a page cannot be created.

4.2 Publishing a page constitutes consent to the collection and use of the information as described in this Policy. Consent may be withdrawn at any time by deleting the page or by writing to us.

5. Disclosure to third parties

5.1 We do not sell, rent or trade in the information, we display no advertising, and the Service contains no external analytics or tracking service.

5.2 The information is accessible to the following service providers, each for a single purpose:

• Railway - hosting of the Service and of the database in which the information is stored.
• Resend - delivery of the notification messages to the creator.
• Cloudflare - management of the domain and routing of traffic to it.
• Lemon Squeezy - selling the page and processing the payment as merchant of record, where publishing a page costs money. Lemon Squeezy collects the payer's details, including their name, email address and payment card, and handles them under its own privacy policy.

5.3 Beyond the above, information will be disclosed only where required by law, by a judicial order or by a competent authority, or where disclosure is necessary in order to defend our rights or to prevent harm to a person.

5.4 Once the recipient has answered, the creator may share, from their private results page, a link to a page setting out the outcome of the invitation: the creator's name, the question asked, the proposed date, the game, the answer and, where the answer was positive, the days selected. The recipient's first name appears on that page only where the answer was positive and the creator chose to display that name on the invitation itself; where the answer was negative, the recipient is not named. The page is visible to anyone holding its link, it is the creator who decides whether to share that link and with whom, and it ceases to operate together with the invitation, as set out in clause 7.

6. Transfer of information outside Israel

6.1 The service providers listed in clause 5.2 store and process the information on servers located outside Israel. Use of the Service constitutes consent to that transfer.

7. Retention and deletion

7.1 A published page remains available for 7 days from the date of publication. On the expiry of that period the link, together with any link shared under clause 5.4, ceases to operate and the contents of the page are erased permanently: the creator's name, the recipient's name, the message, the proposed date, the details of the game, the record of actions within the game, and the email address stored on that page.

7.2 Following the erasure an anonymous record remains, containing the dates, the game, the language and whether the answer was positive. It contains no name, no email address and no text written by any person, and it is used for the statistics described in clause 3.1.

7.3 The creator's email address is additionally retained on a separate list, which contains the address, the number of pages created and the dates of first and last use, and contains nothing concerning the contents of any invitation. The list is retained in order to enable us to contact users of the Service, and the entry is deleted when the creator deletes their last page.

7.4 A creator may delete their page at any time by means of the delete function on their private results page. The deletion is immediate, cannot be reversed, and ends any link shared under clause 5.4.

7.5 We may remove a page before the expiry of the period set out in clause 7.1, in particular upon a complaint of harassment or of improper use of the Service. The contents of the page are erased at that time, and any link shared under clause 5.4 ceases to operate.

8. Cookies and local storage

8.1 No cookie is placed on the device of the recipient of the link, and nothing is stored on that device for the purpose of identifying that person on this or any other website.

8.2 The creator's browser stores one item locally, recording that the page was created from that browser, so that the creator's own visits are not counted as the recipient's. Clearing the browser's storage removes it. Before a page is published, what the creator enters in the creation form is kept only in that browser tab, so that it can be previewed and edited; it is not sent to us, and closing the tab removes it.

8.3 An authentication cookie is used on our internal management interface only. It is not placed on the devices of users of the Service.

8.4 The Service uses no third-party cookie, no advertising cookie and no cross-site tracking technology.

9. Information security

9.1 We apply measures intended to protect the information, including:

• The address of each page, and of each shared result, ends in a long random identifier, so that it cannot be reached by guessing.
• Search engines are instructed not to index the pages, Google and Bing being addressed directly.
• Traffic to the Service is carried over an encrypted connection (HTTPS).
• The internal management interface is protected by a password.
• No payment details are stored, and personal information is erased on the schedule set out in clause 7.

9.2 No system is entirely secure, and we cannot guarantee absolute protection of the information. Should we become aware of a security incident affecting personal information, we will act as required by law.

10. Your rights

10.1 Under the Protection of Privacy Law, 5741-1981, you are entitled to request to review the information held about you, to request its correction, and to request its deletion. A request may be sent to [email protected] and will be answered within a reasonable time and in any event within the period prescribed by law.

10.2 Where a page has been created concerning you, write to [email protected] and include the link; the page will be removed, ordinarily on the same day. In the absence of any action on your part, the link ceases to operate within 7 days of its publication in any event.

10.3 You are further entitled to submit a complaint to the Privacy Protection Authority.

11. Minors

11.1 The Service is intended for persons aged 16 and over. We do not knowingly collect information concerning a person below that age. A parent or guardian who believes that such information is held by us may write to [email protected], and it will be deleted.

12. Changes to this Policy

12.1 We may update this Policy from time to time. The updated version is published on this page and the date at the head of it is amended accordingly. Continued use of the Service following an update constitutes acceptance of it.

13. Contact

13.1 In any matter concerning this Policy or the information held about you: [email protected].