Privacy Policy

The 5×5

Your browser receives and keeps only what the results page shows: the short display answers and citation counts, saved in your own browser's local storage so you can return to them. Nothing about your run is stored server-side in readable form.

The complete answers and citation links are held encrypted on our servers only long enough to deliver a Citation Tracker request — we cannot browse them. They're decrypted in memory only to fulfill or resend a request, and deleted automatically: after 7 days if you don't unlock, or 33 days after you do (the resend window).

Alongside that we keep non-identifying operational metadata — a random run ID, timestamp, the category you picked, timing and success stats — plus your IP address, briefly, to enforce the daily run limit and defend against abuse. IP addresses are automatically redacted after 90 days.

The 5×5 Citation Tracker (free)

Unlocking the Citation Tracker costs your email address, nothing else: we email the full report to it. The Online Identity Rx course — six short emails on what to do with what your report shows — is optional: your address joins that list only if you tick the box next to the email field, and every email has an unsubscribe link. That's the only mailing list FoundFacts keeps. We don't sell your address or share it.

Your email address is stored securely with our email service provider, never in our own databases. Our systems handle it only in memory, long enough to send. The one thing our database keeps is an irreversible cryptographic fingerprint of the address, which lets the Resend button find the report you already unlocked — the fingerprint cannot be turned back into your address.

The contact form

If you message us, we store your name, email, and message so we can reply — nothing more. We don't sell it, and we won't add you to any mailing list without your explicit opt-in.

What we don't do

No accounts. No ad tracking. No selling your data. Ever.