LOADING...
Plain-language disclosure of what we collect, why we collect it, and what we don't. No third-party trackers. No lead lists. Tip-source protection enforced separately on /tips.
Purrsuit is operated by Boycat Inc. (“we”, “our”). This policy describes how we handle data on this site. By using the site you accept this policy. If anything here conflicts with the way the site actually behaves, the policy wins — file a bug.
We use a privacy-respecting analytics service (Plausible, self-hosted) that records aggregate page-view counts and referrers. No cookies, no fingerprint, no IP retention beyond the request itself. Aggregate counts are public on the Boycat dashboard.
Boycat membership data is collected only when a visitor signs up at boycat.io/membership. See the Boycat privacy policy for handling. Single sign-on between Purrsuit and Boycat carries only an opaque session token — this site does not store name, email, or payment details.
When you compose an email through Purrsuit's action panel, the message routes via your default mail client. We don't see the contents. The public action counter on each company profile is incremented anonymously based on the pressed-button event, with no personally-identifying payload.
Tip channels are intentionally minimal-log. See the tips page for the full source-protection rules: no request logs, offline PGP decryption, optional return address only.
We don't embed third-party trackers or ad pixels. The only external domain that loads scripts on this site is Plausible (or its self-hosted equivalent). Filing links go to FEC.gov and IRS.gov; we don't track the click.
Aggregate analytics: 12 months. Member session tokens: until logout or 30 days, whichever is sooner. Tip emails: deleted off the inbox within 30 days; PGP-decrypted plaintext is shredded after editorial review (typically within 7 days).
Under applicable law (CCPA, GDPR), you have the right to request a copy of any personal data we hold and to request its deletion. Email boycat@boycat.io from the address you used to sign up. We respond within 30 days.
Material changes to this policy are versioned and dated. The changelog is published on boycat.io/privacy-policy. Non-material changes (typo fixes, formatting) ship unannounced.
QUESTIONS
Data requests, deletion, or anything that needs verification — email the privacy address. We respond within 30 days.