Privacy Policy

Who is responsible

F*ckSubscription is operated by Martin Bonan, who is the data controller for the data described here. For any privacy question or request, email martin@fcksubscription.com.

What we collect and why

• Waitlist, interest and price-alert sign-ups. When you leave your email to hear about an app or one of our packs, we store the email and what you signed up for, and we get an email notification of the sign-up so we can reply. When you tick the box to get price-change alerts on our comparison and calculator pages, we store your email in the same database. Some older sign-ups are also kept in mailing lists at Resend. Every sign-up is confirmed by email first: we send you a link, and your address is only used for mailings once you click it. We use these emails for what you signed up for (news about that product, or price changes of the tools you compared) and for occasional F*ckSubscription news and launches. Legal basis: your consent, which you can withdraw at any time with the unsubscribe link in every email.
• Purchases. When you buy the bundle or a pack, Stripe collects your payment details and billing address; we never see or store your card number. We receive and store your email address, the amount paid, the purchase date, the Stripe payment reference and, for the bundle, your license key. The license record is copied to each app's database so the key can be activated there. We use it to deliver your purchase, send your license key, and provide support. Legal basis: performance of our contract with you, and our legal obligations for accounting and tax records.
• Affiliate referrals. If a bundle owner refers you, we store their email and yours to attribute the commission when you buy. If you arrive through a referral link (a link with ?ref=), we store its code in a cookie for 30 days and pass it to checkout, so the referrer is credited if you buy. Legal basis: our legitimate interest in running the affiliate program.
• Emails we send. Transactional emails (license keys, purchase confirmations) and, if you signed up, product news. Every marketing email has a one-click unsubscribe link. When you unsubscribe we keep your email address on a suppression list so we never email you again.
• App suggestions. If you suggest a tool for us to build, we store the name you type, with no email or other identifier attached.
• Anonymous counters. We count clicks on app links and votes on app ideas. These counters store the app name and a timestamp, nothing that identifies you. To prevent double votes, your browser remembers which idea you voted for in its local storage. Until October 2026 the click counters also stored visitors' IP addresses; we stopped collecting them, and the stored ones are no longer accessible to anyone outside our team and are scheduled for deletion.
• Analytics. We measure how the site is used with two tools:
  • Vercel Web Analytics, which counts page views without cookies or persistent identifiers.
  • Mira, an analytics tool operated by Astry. It stores a random visitor ID in your browser's local storage and a session ID for the current visit, and records the pages you view, clicks, scrolling, the referring site, and technical information about your device and browser (browser and OS version, language, screen size, connection type, performance timings).
  Legal basis: our legitimate interest in understanding and improving the site. You can clear the visitor ID at any time by clearing your browser's site data.
• Abuse prevention. To stop people from signing up others or flooding our forms, we keep a keyed hash of your IP address and email address (not the addresses themselves) to limit the number of sign-ups per hour and per day. We delete these records once they are more than a day old.
• Server logs. Our host, Vercel, processes your IP address and browser information to serve pages and protect the site against abuse.

We don't sell your data, we don't use advertising trackers, and we don't make automated decisions about you.

KiwiProof: people who leave a testimonial

KiwiProof lets its customers ("owners") collect testimonials through a public form. If you leave a testimonial there, the owner of that form decides what to publish and is responsible for it; we host the data for them, in our Supabase database.

• What the form stores: your name, your role or company (optional), a star rating (optional), your text, an optional photo (JPEG, PNG or WebP, up to 2 MB, kept in private storage) and an optional YouTube or Loom link. We do not ask for your email address.
• Consent: you must tick a box agreeing that the owner may publish your testimonial with your name, role and photo. Nothing is public until the owner approves it; approved testimonials (name, role, rating, text, photo, video link and dates) are shown on the owner's website.
• Abuse prevention: to rate-limit the form we store a salted hash of your IP address, never the address itself. These records are short-lived and deleted automatically.
• Owners can also add a testimonial by hand (for example a public post) and attest that they may publish it.
• How long: until the owner deletes the testimonial, the space or their account. To have your testimonial removed, ask the owner, or email martin@fcksubscription.com and we will pass it on or remove it.

Who processes your data

We rely on these providers, each acting on our instructions:

• Vercel (United States): hosting, server logs, Web Analytics.
• Supabase (databases hosted in the United States): sign-ups, purchase and license records, referrals, counters.
• Stripe (United States / Ireland): payments.
• Resend (United States): sending emails and storing mailing lists.
• Astry: Mira analytics.

When data is transferred outside the European Economic Area, it is protected by the European Commission's Standard Contractual Clauses or the EU-U.S. Data Privacy Framework, as offered by each provider.

How long we keep it

• Waitlist and interest sign-ups: until you unsubscribe or ask us to delete them.
• Purchase and license records: for as long as your license is active, and then as long as accounting and tax law require.
• Suppression list (unsubscribed addresses): permanently, so we never email you again. Ask us if you want it removed anyway.
• Affiliate referrals: until the commission is paid, then as long as accounting law requires.
• Analytics and server logs: according to Vercel's and Mira's retention settings.

Your rights

You can ask to access, correct, delete or export your data, to restrict or object to its processing, and to withdraw your consent at any time. Email martin@fcksubscription.com and we will answer within one month. You can also lodge a complaint with your local data protection authority.

Changes

If we change what we collect, we update this page and the date at the top. For significant changes we will tell people on our mailing list by email.