Last reviewed 2026-09-06. Plain language, no legalese. If anything here stops being true of the product, the page is wrong and we fix the page.
WARN Feed is published by APProjects, an individual seller operating through Gumroad (seller name approj). Every payment is taken by Gumroad, Inc. as the merchant of record: your card details go to Gumroad, never to us, and your receipt, invoice and any refund come from Gumroad. We do not publish a personal legal name or postal address on this site; if your purchasing process requires a named counterparty and a signed agreement, this product is not a fit and you should not buy it.
Contact: reply to your Gumroad receipt email (it reaches us through Gumroad), or open an issue at github.com/APVentureEngine/warn-act-notices/issues. Both are read on every daily refresh.
Reading the free dataset, the site, the feeds and the GitHub repository collects nothing: no account, no cookies, no sign-in, no third-party analytics script. The only two places you can hand us anything are below.
| When | What | Why we need it | Where it lives |
|---|---|---|---|
| Buying WARN Watch (paid or free trial) on Gumroad | Your email; the employer terms and state codes you type; the page key (the checkout box labelled “Page key”; orders placed before 6 Sep 2026 saw it labelled “Passphrase”); optionally a Slack / Discord / Teams webhook URL. | Email + page key are hashed (SHA-256) into the private address of your alert page. Terms and states are what we match against each day's notices. The webhook URL is where we post matches. | Gumroad's servers (the sale record), and a fulfilment file on the private server that runs the daily refresh. Not in the public repository, not in the dataset, not on any public page. |
| Buying the historical archive on Gumroad | Your email; optionally a GitHub username. | Gumroad delivers the ZIP to the email. The GitHub username, if given, is used once to invite you to the private mirror repository. | Gumroad's servers; the GitHub invitation. |
| The “stay in touch” box on the landing page | Your email. | So we can tell you when the paid tiers change. It is Gumroad's follower form, posted straight to Gumroad; unsubscribe from any message. | Gumroad's servers only. |
The checkout box labelled “Page key” (“Passphrase” on orders before 6 Sep 2026) is a page key, not a password. We store it readable, on purpose, so that when you forget it we can reply to your receipt with the direct link to your alert page. That means: never type a password you use anywhere else. Any word or short phrase you will remember is right (“blue moon 42”). It only protects one thing: it stops someone who merely knows your email address from computing your alert page's address.
Your alert page itself is a public-but-unguessable static page: its address is the first 32 hex characters of
SHA-256("warnwatch|" + your email + "|" + your page key), computed in your own browser when you open
the finder (nothing is sent anywhere). The page contains your watched terms and the
matching public WARN records — never your email or your key. Anyone you give the link to can read it; it is not
listed anywhere and search engines are told not to index it.
A Slack, Discord or Teams incoming-webhook URL lets anyone who holds it post into that channel. If you paste one at checkout we store it (readable, on the private refresh server and in the Gumroad sale record) and use it for exactly one thing: posting your WARN matches on the day we see them. We never publish it, never post anything but match notifications, and never share it. You stay in control: you can revoke or regenerate the webhook in Slack / Discord / Teams at any time, which cuts us off instantly; tell us and we replace it or remove it.
Each page loads one 1×1 image from the jsDelivr CDN. jsDelivr publishes an aggregate daily request count for that file, which is how we know roughly how many times the site was opened. There is no cookie, no script, no per-visitor record, and no data reaches us other than that public daily number. Gumroad's own checkout and listing pages run Gumroad's analytics, which are Gumroad's, not ours.
