Privacy Policy

Last updated: August 21, 2026

What We Collect

When you use DataLookout, we collect:

• Your email address (to sign you in and deliver your digest)
• Your watchlist, saved searches and preferences (sponsors, disease areas, email frequency)
• Payment information (processed securely by Stripe, we never see your full card number)
• Basic usage data: which pages you visit, which links you follow from our pages to ClinicalTrials.gov or other outside sites, whether you opened or clicked one of our emails, and how you first arrived at the site
• Your IP address when you sign in. We keep it for about two hours, so that we can tell a real sign-in from an automated attack on your account, and then it is deleted automatically. Google Analytics also receives your IP address when you browse the site, as described under Cookies below.

We do not buy personal data, and we do not sell or share yours.

How We Use Your Data

We use your information to:

• Send you clinical trial digest emails based on your watchlist
• Process subscription payments via Stripe
• Respond to support requests
• Understand which parts of the product are used and which channels bring people to DataLookout, so we can improve both

Cookies

If you visit from the European Union, Iceland, Liechtenstein, Norway or the United Kingdom, or from a place we cannot identify, a bar at the bottom of the page asks before Google Analytics or the referral cookie are used. Nothing optional loads until you click Accept. Closing the page, scrolling or ignoring the bar is not consent. Your answer is kept for six months in one cookie that covers both datalookout.com and dashboard.datalookout.com, and the "Cookie settings" link in the footer reopens the bar so you can change it. Visitors from elsewhere are not asked, but can decline from the same footer link.

We use a small number of cookies:

• Sign-in cookie: keeps you logged in. The product does not work without it.
• Consent cookie: remembers whether you accepted or declined the optional cookies, for six months. It holds only that answer.
• Referral cookie: records how you first reached the site (for example, a search engine or a link from another site) so we can understand which channels bring people to DataLookout. It is first-party, holds no personal information, and expires after 90 days.
• Google Analytics: we use Google Analytics to measure aggregate site traffic. Google sets its own cookies. See Google's privacy policy. You can opt out with Google's browser add-on.

You can clear or block cookies in your browser at any time. Blocking the sign-in cookie will prevent you from logging in; blocking the others has no effect on the product.

Data Sources

All clinical trial data comes from ClinicalTrials.gov, a public database maintained by the U.S. National Library of Medicine. We do not collect any patient data or personal health information from trial records.

Third-Party Services

• Stripe: payment processing. See Stripe's privacy policy.
• SMTP2GO: email delivery. See SMTP2GO's privacy policy.
• Google Analytics: aggregate site analytics. See Google's privacy policy.
• Cloudflare: hosting and content delivery. See Cloudflare's privacy policy.

Data Retention

We retain your email and profile data for as long as your account is open. If you delete your account, we deactivate it immediately and stop all emails. You can ask us to erase your remaining data at any time by emailing support@datalookout.com, and we will do so within 30 days.

Backups are the one exception, and we would rather explain it than leave it out. We keep encrypted backup copies of our database so that a hardware failure cannot lose your account. When we erase your data from the live system, copies of it remain inside those backups until they are overwritten on the normal rotation schedule, normally within about 60 days. We do not edit backups by hand, because a backup that has been tampered with is no longer a reliable backup. Nothing in a backup is used to contact you or to run the product.

Your Rights

You may request access to, correction of, or deletion of your personal data at any time by emailing support@datalookout.com.

Who Is Responsible For Your Data

DataLookout is an independently operated business based in Nevada, United States. For data protection purposes, DataLookout is the data controller for the information described on this page. You can reach us at support@datalookout.com, and we will provide the name and postal address of the operator on request.

DataLookout is run from the United States, and your data is stored and processed there. If you are contacting us from outside the United States, please be aware that your information will be transferred to the United States.

Contact

For privacy-related questions, email support@datalookout.com.