Privacy
This site has one form on it, and most of what follows describes that form, because it is the only thing here that asks you for anything. The rest covers the two things that happen without you doing anything: the ad identifier, if an ad is what brought you, and the script that checks whether the click we paid for was a person.
- What the site stores
- Only what you type into the idea form: your name, your email address, your company if you give one, and the idea itself. Alongside it the server records the time, your IP address and your browser’s user-agent string, which are used to stop the form being abused and nothing else, plus the ad identifier described below where there is one.
- Where it goes
- A Postgres database on Railway, in a private network, plus one notification email through Resend. It is not sent anywhere else, and it is not used to train anything.
- Who reads it
- Cayman, and nobody outside it. Your brief is not passed to a third party, a lead broker, or an advertising network.
- What we do with your idea
- We read it and reply. We do not share it, we do not use it, and we do not go and build it ourselves. If you would rather have that in writing before you send anything, email us your NDA and we will sign it first.
- How long it is kept
- Briefs are kept while a conversation is live and for twelve months after the last message, so a thread can be picked back up. Ask us to delete yours earlier and we will, the same day.
- The one script that runs
- No page here sets a cookie and there is no advertising pixel. One script does run, on every page: ClickLens, which Cayman built and hosts itself. Its job is to tell a real visit apart from a bot clicking our ads, because we pay for those clicks either way.
- What that script reads
- The things your browser announces to every site you open — user agent, language, screen size, timezone, and the marks left by automation software driving the browser. It also draws a small test image and reads back how your graphics hardware rendered it, which differs enough between machines to be worth checking. Then it watches the visit itself: where the mouse went, how far you scrolled, how long the gaps between keystrokes were. It counts keys and times them, and the letters you type are never read or sent.
- What happens to it
- It goes to ClickLens, on Railway, in the same private network as everything else here, and it is scored once and kept for seven days. After that the whole record is deleted, IP address included. It is not sold, not shared with an advertising network, and it cannot follow you to another site — the session it opens lives in the tab and dies when you close it.
- Turning it off
- Switch on Global Privacy Control or Do Not Track in your browser and the hardware fingerprinting is skipped on this site. What your browser tells every server anyway, and the timing of the visit, still get scored — catching a bot that is costing us money is the one thing this exists to do.
- If you arrived from an ad
- An ad click puts an identifier on the address you land on. Your browser holds that identifier until you close the tab, and it is sent once, with the brief, if you choose to send one — which is how we know which ad was worth paying for. Read the page and leave and it goes with the tab. We report it back to the ad network only when the work is won, and it never travels with your name, your email address or a word of what you wrote.
- Having it removed
- Email [email protected] and say so. You do not need to explain why.
Cayman Pty Ltd, Sydney, NSW, Australia · [email protected] · Last updated 24 August 2026