Legal

Privacy Policy

Last updated: 26 August 2026

This Privacy Policy explains how SponsorTheDay ("we") processes your personal data. The data controller is Thomas Trimoreau, sole trader (micro-enterprise), France — see our Legal notice. Contact: support@sponsortheday.io.

1. Data we collect

  • Account data: email address, display name, username, password (stored only as a salted hash), and optionally your bio, profile photo, accent colour and currency.
  • Sign-in with Google / X (optional): if you connect them, we receive basic profile information (name, email where provided, avatar) and, for X, your handle and public follower count. X access tokens are stored encrypted and used only to read your public profile stats; you can disconnect at any time.
  • Payment data: your subscription is processed by Stripe. We do not see or store your card details; we store your Stripe customer/subscription identifiers and plan status.
  • Booking data: when a brand books a placement, we process the brand name, contact email, website, brief, chosen date and amount. Sponsor payments are processed on the creator's own Stripe account.
  • Uploaded content: images you upload (profile photo, sponsor artwork) and analytics screenshots you submit for verification.
  • Usage & technical data: first-party, aggregate, cookieless page/visit/click counters, plus standard security logs (e.g. IP address for rate limiting and fraud prevention).

2. Why we use it (legal bases)

  • To provide the Service (account, page, bookings, billing) — performance of a contract.
  • Security, fraud prevention and product improvement — our legitimate interests.
  • Accounting and legal obligations — compliance with the law.
  • Optional integrations (connecting X, AI-assisted stat pre-screening) — your consent, which you can withdraw.

3. Who we share it with (processors)

We use a small number of trusted service providers who process data on our behalf:

ProviderPurpose
StripeSubscription payments & billing
CloudflareHosting, database and content delivery
ResendTransactional emails (alerts, notifications)
GoogleOptional "Sign in with Google"
X (Twitter)Optional "Sign in with X" & follower stats
AnthropicOptional AI pre-screening of verification screenshots

We never sell your personal data. Some providers are located outside the EU (e.g. in the United States); such transfers rely on appropriate safeguards such as the EU Standard Contractual Clauses or an adequacy decision.

4. Cookies & local storage

We use only strictly necessary browser storage — for example, to keep you logged in and remember interface preferences. We do not use advertising or third-party tracking cookies, and our analytics are cookieless. No consent banner is therefore required for tracking, because we do not track you across sites.

5. How long we keep it

We keep account data for as long as your account is active and for a reasonable period afterwards. Billing and transaction records are kept as required by accounting law (in France, generally up to 10 years). Verification screenshots are kept only until the review is resolved and then deleted. You can request deletion at any time (subject to legal retention).

6. Your rights

Under the GDPR you can request access, rectification, erasure, restriction, portability, and object to certain processing. To exercise these, email support@sponsortheday.io. You may also lodge a complaint with the French data protection authority (CNIL, cnil.fr) or your local authority.

7. Security

We protect your data with encryption in transit, hashed passwords, encrypted third-party tokens, and access controls. No system is perfectly secure, but we work to keep your data safe and to notify you of any breach that affects you as required by law.

8. Changes

We may update this policy; material changes will be notified by email or in-app. The date at the top shows the latest version.