What we collect, what we don't.

We collect what you type into our forms (inquiries, referrals, calculator emails) and store it so Justin can follow up. We use a privacy-respecting analytics tool to count pageviews. We do not use cookies for tracking. We do not sell or share data with advertisers. We will delete your information on request · email hello@outpostvending.co.

We only collect data when you give it to us. There is no passive harvesting beyond the analytics described below. Specifically:

• Contact form (/#contact): venue name, contact name, email, phone (optional), monthly customer estimate, message, and a generated reference number. Stored in our database so we can reply and reference the inquiry later.
• Calculator email-me-my-projection (/#the-math): if you ask us to email your projection, we store the email plus the calculator inputs you set so the message can be sent.
• Save my projection (/p/:slug): the calculator inputs you saved (numbers only, no email) plus a random short URL. No personal info attached unless you also use the email-this-to-me option in the same modal.
• Referrals (/refer): your venue + name + email, the referred venue's name + optional contact info, and any notes. Stored so we can follow up on the lead and send your $100 credit.
• Booking (Cal.com embed): if you schedule a walkthrough, the timeslot + your name + email + any answers you give in Cal.com's form go to Cal.com directly. We see the resulting calendar invite via email; Cal.com is the system of record.
• Chat assistant: messages you type into the on-site chat are sent to Anthropic to generate a reply. Anthropic does not retain the conversation under our zero-data-retention setup. We do not store chat transcripts on our side.

We use two analytics tools, both configured to avoid personal data:

• Umami Cloud: counts pageviews, button clicks, and other events. No cookies. No cross-site tracking. IP addresses are hashed before logging. Umami's privacy policy.
• Vercel Analytics: aggregate pageview and Core Web Vitals reporting from our hosting provider. Cookieless. Vercel's privacy policy.

We do not use Google Analytics, Meta Pixel, or any advertising network's analytics tag.

We do not set tracking cookies. The site uses your browser's localStorage (not cookies, not sent to our server) for two convenience features:

• The calculator remembers your last slider positions so you don't start from scratch on a return visit.
• Saved comparison projections (up to three) live entirely in your browser.

Clearing your browser's site data removes both. They are never sent to any server.

We use one first-party cookie for A/B-test consistency: a single letter (A or B) so the same hero headline shows up on every visit. It expires after 30 days, contains no personal data, and is never sent to a third party.

• Form submissions, projections, referrals: Supabase (Postgres, US-East region). Encrypted at rest.
• Email delivery: Gmail / Google Workspace, sending from hello@outpostvending.co.
• Hosting + the site itself: Vercel.
• Bot protection: Vercel BotID, log-only mode.

Form submissions and referrals stay in our database until you ask us to delete them, or until the relevant follow-up cycle is complete (typically a few months for cold leads, longer for active partners). We do not have an automated deletion timer; data sits until acted on. Email hello@outpostvending.co from the email address that originally submitted the data and we will remove it within seven days.

We do not sell, rent, or trade your data. We do not share it with advertisers. We share data only when needed to operate the service · Supabase to store, Gmail to deliver email replies, Cal.com to host the booking, Anthropic to generate chat replies · each of which has its own privacy controls and is bound by their respective terms.

You can ask us to:

• Tell you what we have on file about you.
• Correct anything that is wrong.
• Delete it.
• Export it.

Email hello@outpostvending.co with the request. Verification will be a reply from the same email address you originally used; if that's no longer accessible, we'll work out an alternate verification path.

The site is intended for venue owners and operators (typically 21+). The products our placement program sells are age-restricted and require ID verification at the point of sale on every age-restricted product. This is hardware enforcement, not a self-attestation. We do not knowingly collect data from anyone under 18 visiting the site.

If we change what we collect or who we share it with, this page updates and the "Last updated" stamp at the top changes. Material changes will also be noted in the Outpost Vending blog at outpostvending.co/blog.

Questions, complaints, or requests: hello@outpostvending.co. Mail goes to Justin directly.