Privacy policy

Last updated: 1 October 2026 · Policy version 2026-10-01

This policy explains how SoonViral ("we") handles personal data when you visit the website, subscribe to a newsletter, create an account or book a sponsorship. We are based in the European Union and apply the GDPR to everyone, wherever they live.

Controller: SoonViral, Croatia. Contact: hello@soonviral.com.

What we collect and why

• Email address, chosen niches, language — purpose: Sending the newsletters you asked for; legal basis: Consent (Art. 6(1)(a)); kept for: Until you unsubscribe, then deleted after 30 days except a suppression entry.
• Consent record: time, sign-up method (email link or Google), sign-up page, policy version — purpose: Proving consent; legal basis: Legal obligation (Art. 6(1)(c)); kept for: As long as the subscription, plus 3 years.
• Link clicks in newsletters (which link, when) — purpose: Keeping the list healthy (we stop emailing people who never click), sponsor reports with totals only; legal basis: Legitimate interest (Art. 6(1)(f)); you can turn it off; kept for: 13 months.
• Account: name, email, profile picture from Google, saved topics and ideas — purpose: Providing your free account; legal basis: Contract (Art. 6(1)(b)); kept for: Until you delete your account.
• Sponsor bookings: company, contact email, invoices — purpose: Selling and delivering sponsorships; legal basis: Contract and legal obligation; kept for: 10 years for accounting records.
• Messages you send us — purpose: Answering you; legal basis: Legitimate interest; kept for: 2 years.
• Free-tool usage: a salted, daily-rotated hash of your IP address — purpose: Rate limiting; legal basis: Legitimate interest; kept for: 2 days.

What we don't do

• No tracking cookies and no advertising profiles. Site analytics are cookieless: we count page views per page per day with no visitor identifier, so no consent banner is needed. Signing in sets one strictly necessary session cookie.
• No open tracking. We don't use tracking pixels to see whether you opened an email.
• No selling or sharing of subscriber data. Sponsors only ever see totals (deliveries, clicks).
• No data from social platforms. With Google sign-in we receive only your name, email address and profile picture (scopes openid, email, profile) and use nothing else from your Google account.

Click tracking

Links in our emails pass through a redirect on our domain so we can count clicks. Turn this off any time under "Preferences" in any email or in your account; your links then go straight to their destination.

Your rights

You can access, correct, export or delete your data, object to processing, withdraw consent and complain to your data protection authority. Signed-in users can download all their data and delete their account themselves under Account. Anyone else can write to hello@soonviral.com.

Processors

We use the service providers listed on the subprocessors page. Some are outside the EU; transfers rely on the EU–US Data Privacy Framework or Standard Contractual Clauses.

Changes

We'll email subscribers about material changes. Each consent record stores the policy version you agreed to.