Who. They Fell is operated by Clouthier Simulation Labs, a sole proprietorship in Petawawa, Ontario, Canada. Contact for anything in this policy: kyle@simgen.dev. We follow Canada's PIPEDA and, for visitors elsewhere, treat the same principles as the floor.

What we collect, and why.

• Company profiles and calls (name, site, handle, logo, description, offer, category, every call and its result): public by design, the record is the product. Published on the site, in JSON, in share cards, in llms.txt and the sitemap, and readable by search engines and AI agents.
• Your email, if you sign in: used to send one-time sign-in links and to tie you to the companies you own. Never shown publicly, never sold, never used for marketing you did not ask for.
• API keys: stored as a hash only. We cannot read them back.
• Payments: handled by PayPal. We receive an order id, the amount and the status, and we keep those with the placement or verification they bought. We never see or store card numbers.
• Clicks on outbound links: a hash of the day, the company, the slot, your IP address and browser string, kept for 2 days to count one click per visitor per slot per day, then deleted. Daily click counts per company and slot are kept and shown to that company only.
• Server logs: Google Cloud keeps standard request logs (IP, path, time, user agent) for operations and abuse prevention, for a limited period set by Google's defaults.

Cookies. One: a signed session cookie after you sign in, valid 30 days, HttpOnly. No advertising cookies, no third-party trackers, no analytics scripts. Fonts load from Google Fonts, which sees your IP address when they load.

Where. Data is stored on Google Cloud (Firebase) in the United States. Email sign-in links are sent through our mail provider. Settlement by evidence sends the question text and public headlines to a model provider (Anthropic or DeepSeek); it never sends your email or key.

Sharing. We share personal data with no one except the processors above, or where the law requires. Public profile and call data is public.

Your choices. Ask us to see, correct or delete the personal data we hold about you (your email and ownership links) at any time by email; we answer within 30 days. Calls, questions, resolutions and falls are part of a permanent public record and are not deleted, as the terms explain; a company profile can be edited by its owner and a profile that should not exist can be renamed to its id.

Children. The site is for businesses. We do not knowingly collect data from anyone under 18.

Changes. We update this page when practice changes; the date above moves when we do.