Privacy policy

Last updated 2026-10-21

This site is operated by Gerardus J.B. Kroeger, sole trader (autónomo), NIE Y0838588-E, Calle Fortuna 41, 11315 La Línea de la Concepción (Cádiz), Spain ("we"), the data controller. Contact: hello@whosponsorspods.com.

What we collect

• Account email: used to send sign-in links, product emails (weekly digest, alerts) and service notices.
• Free list requests: when you request the free top-50 sponsor list we store your email, whether you ticked the optional "weekly free sponsor roundup" box (and when), the time of the request and the page you used. We use this to email you a 7-day download link (legal basis: your request, GDPR art. 6(1)(b)) and, only if you ticked the box, to send the weekly roundup (legal basis: consent, art. 6(1)(a); you can withdraw it anytime via the unsubscribe link in every email or by emailing us). Consented addresses are kept in our email provider's (Resend) contact list. Request records are kept for up to 24 months after your last request, roundup subscribers until they unsubscribe; we then delete them.
• Billing: payments are processed by Stripe. We do not see or store card numbers; we receive your subscription status and customer ID.
• Technical data: our host (Cloudflare) processes IP addresses and request logs for security and rate limiting.

We do not sell personal data and do not use advertising trackers.

Processors

Cloudflare (hosting and storage of free-list requests), Stripe (payments), Resend (email delivery and the roundup contact list). Some processors may process data outside the EEA under the EU Standard Contractual Clauses.

Podcast data

Sponsor data is derived from publicly published podcast RSS feeds and concerns brands and shows, not private individuals. To request a correction or removal, email us.

Retention & your rights

Account data is kept while you have an account and deleted on request, except where we must keep billing records by law. Depending on where you live (e.g. EU/UK GDPR, California CCPA) you may access, correct, delete or export your data, or object to processing: email us. Legal basis (GDPR art. 6): performance of the contract, your request, consent (marketing emails) and legitimate interests (security, rate limiting). You may also complain to the Spanish data protection authority (AEPD, aepd.es).

Cookies

One essential session cookie keeps you signed in. No analytics or advertising cookies.