Privacy policy

DleOutreach (outreach.alldle.net) is an invitation-only email outreach tool. It helps small teams introduce their web guessing games (the “dle” games) to content creators: streamers and video creators. This policy explains what data the tool handles, why, who it is shared with and what your rights are.

Who is responsible

Publisher: Flavio Moreno, France. Contact: flavio.moreno941@gmail.com.

Each organization (team) using the tool chooses which creators it contacts and which emails it sends. Its data is kept separate from other organizations.

Data about the people using the tool

• Account: when you sign in with Google, your name, email address, profile picture and Google account ID. Signing in reads nothing else from your Google account.
• Session: a session cookie, and the IP address and browser (user agent) of each session, for security.
• Content: what your team creates in the tool: games, campaigns, templates, notes and settings.

Gmail data

When you connect a Gmail inbox, the tool asks Google for two permissions.

Send email on your behalf (gmail.send)

Used only to send, from that address, the emails you wrote or reviewed and approved in the tool: a first email, then follow-ups in the same thread. No email is sent without that approval.

Read your email and settings (gmail.readonly)

Used only to know what happens after those emails, so the follow-ups stop as soon as a recipient replies. The tool:

• reads the threads it created, to find the replies;
• lists the IDs (not the content) of the emails received in the last few days, to spot a late reply in one of those threads;
• searches for emails sent by creators already contacted, bounce notices (mailer-daemon) and unsubscribe requests;
• lists your “Send mail as” addresses (aliases), so you can choose the sender.

Only the messages matching these searches are opened. Your other emails are never read. The tool never changes, labels or deletes any email.

What is stored

The inbox address; an access token (refresh token) encrypted with AES-GCM; the Gmail IDs of the messages and threads the tool sent; and, for each reply from a creator, the sender's address, a snippet and the text of the reply. Replies are visible to the members of the organization the inbox is connected to, so they can answer.

Sorting replies with AI

The text of a reply can be sent to an AI model, through OpenRouter, to sort it (interested, not interested, unsubscribe…), translate it and summarize it, for that organization only.

Our commitments

• DleOutreach's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
• Gmail data is used only for the features described above, which you can see in the tool.
• It is never sold, never used for advertising, and never used to develop, improve or train generalized artificial intelligence or machine learning models.
• It is only transferred to the service providers listed below, to run these features, or when the law requires it.
• No one reads it apart from the members of your organization in the tool, unless you explicitly agree for specific messages, for security reasons (investigating abuse), or to comply with the law.

Data about the creators contacted

For the creators the teams contact, the tool collects public information: username and display name, public channels and links, public statistics (Twitch, YouTube, Kick, TikTok), bio, language, country, recent public videos and streams, and the business email address published on their pages. It comes from the Twitch, YouTube and Kick APIs, from ScrapeCreators, and from the creators' public pages.

It is used to offer a collaboration related to their content (legitimate interest). It can be sent to an AI model, through OpenRouter, to extract the email address and first name from a bio and to draft a personalized email, which a person reviews before sending.

• Every email says that a simple reply is enough to never be contacted again, and any reply stops the follow-ups.
• After a request to stop, no more emails are sent to that address: it is added to the organization's exclusion list, where it is only kept as a fingerprint (SHA-256 hash).
• The game link in an email goes straight to the game's site: clicks are not recorded, and emails contain no tracking pixel.
• A creator can ask for their data to be deleted by writing to the contact above.

Service providers

• Cloudflare: hosting of the tool and its database.
• Google: sign-in and Gmail. The interface fonts are also loaded from Google Fonts.
• OpenRouter, and the model providers it calls: drafting, extraction, sorting and translation.
• Twitch, YouTube, Kick and ScrapeCreators: collection of creators' public data.

Some of these providers are located outside the European Union, notably in the United States.

Retention and deletion

• Data is kept as long as the organization uses the tool.
• Disconnecting an inbox (Settings › Gmail inbox) deletes its token and its sender identities. You can also remove the tool's access at any time from your Google account.
• On request to the contact above, we delete your account, your organization and the related data within one month.

Security

Access by invitation only, data separated by organization, Gmail tokens encrypted in the database, and every connection over HTTPS.

Your rights

Under the GDPR, you can access, correct or delete your data, object to or restrict its use, and ask for a copy, by writing to flavio.moreno941@gmail.com. You can also lodge a complaint with your data protection authority (in France, the CNIL).

Cookies

The tool sets a single cookie, needed for your session. There is no audience measurement and no advertising.

Changes

The date at the top of this page shows the current version.