Privacy policy

Short version: you can read lessons without an account. If you sign in, we store your start date and progress so we can unlock one lesson a day. We use cookieless analytics, show no ads, sell nothing, and never post anything for you.

Who is responsible

Toilet Marketing (toiletmarketing.com) is run by Valentin Peshev, Bulgaria, the controller of your personal data. Contact: hello@toiletmarketing.com.

What we collect

• Without an account: nothing that identifies you. Our host and analytics tool process technical data (see below) to deliver the site and count visits.
• When you sign in with Google: Firebase Authentication (by Google) keeps your Google account ID, name, email address, profile photo link and sign-in times. We use them to sign you in and show your name and email on the account page.
• Your profile: in our database (Cloud Firestore, by Google) we store only when you signed up, which content season you started with, and the last day you opened your daily lesson. Your personal lesson order is calculated from your account ID and is not stored.
• On your device: Firebase keeps you signed in using your browser's storage. We also store a small "signed in" flag without any token so the menu shows the right link. These are strictly necessary and are removed when you sign out.

Analytics without cookies

We use Umami Cloud to count page views and a few actions (for example "share button clicked" or "signed up"). Umami sets no cookies, doesn't track you across websites and doesn't store your IP address; it reports aggregated data such as pages, referrers, browser, device type and country. If your browser sends "Do Not Track", we don't count you. We never send your email, name or account ID to analytics.

Sharing on X

The "Share on X" button opens X's own post page with suggested text and a link. Nothing is posted unless you post it, and we don't receive your X account details. Publicly posted content on X is governed by X's own terms and privacy policy.

Why we process data (legal bases)

• To provide the daily series you signed up for: performance of a contract (GDPR Art. 6(1)(b)).
• Cookieless, aggregated analytics and keeping the service secure: our legitimate interest in understanding what's useful and preventing abuse (Art. 6(1)(f)).

Who processes it for us

• Google (Firebase Authentication, Cloud Firestore, Firebase Hosting).
• Umami Software, Inc. (Umami Cloud analytics).

These providers may process data outside your country, including in the United States, under their data processing terms and appropriate safeguards such as the EU Standard Contractual Clauses.

How long we keep it

Your profile and sign-in are kept until you delete your account. Analytics are kept in aggregated form. Hosting providers keep short-lived technical logs for security.

Deleting your account

Go to Account and choose Delete my account. We first delete your profile from our database, then your sign-in from Firebase Authentication. Because these are two separate systems, deletion can fail halfway (for example if your connection drops). The page tells you if that happens and lets you finish it. If it keeps failing, email hello@toiletmarketing.com and we'll complete it manually within 30 days. If you sign in again later, you start a fresh series.

Your rights

You can ask for access to, correction of, deletion of, or a copy of your personal data, and you can object to or restrict processing. Email hello@toiletmarketing.com. You can also complain to your local data protection authority.

Children

Toilet Marketing is not meant for children under 16, and we don't knowingly collect their data.

Changes

If this policy changes, we'll update the date at the top. Significant changes will be announced on the site.