Privacy policy
Last updated: 17 October 2026
The short version. We collect your email address and the send time you pick so we can email you a daily lesson. We see whether emails are opened and which links are clicked. We do not sell your data, we do not show ads in the lessons, and analytics or advertising cookies are only set if you accept them. You can unsubscribe at any time from any email.
1. Who we are
Inbox Ritual is run by Digital Time Savers EOOD (UIC 204305606), Gotse Delchev 5, Petrich 2850, Bulgaria (we, us). We are the data controller for the personal data described here. Contact: hello@inboxritual.com. You can also reply to any Inbox Ritual email.
2. What we collect and why
| Data | Why | Legal basis |
|---|---|---|
| Email address | To send you the daily lesson you signed up for | Your consent |
| Send time choice (London or New York) | To send the email at the time you picked | Your consent |
| Signup date, confirmation and the IP address used to sign up | To prove you asked to join and to stop fake signups | Legitimate interests |
| Email opens and link clicks | To see which lessons are useful and to remove inactive addresses | Your consent |
| Replies you send us | To answer you and improve the lessons | Legitimate interests |
| Basic server logs (IP address, browser, pages requested) | To keep the website running and secure | Legitimate interests |
| Website usage (pages visited, device, approximate location) through cookies | To understand which pages work and to measure our ads | Your consent, given on the cookie banner |
We do not ask for your name, and we do not use your data for automated decisions or profiling that affects you.
3. Email tracking
Our emails contain a small image and tracked links that tell us whether an email was opened and which links were clicked. You agree to this when you sign up. If you do not want it, you can turn off image loading in your email app, or unsubscribe.
4. Cookies
We use Google Analytics to count visits and see which pages work, and the Meta (Facebook) pixel to measure our ads. Neither loads until you click Accept on the cookie banner. If you click Deny, only the small cookie that remembers your choice is set. You can change your choice at any time with the Manage consent button on the page. The full list of cookies is in our cookie policy.
5. Who we share data with
We never sell or rent your data. We use these service providers:
- An email service provider stores the subscriber list and sends our emails.
- A web hosting provider hosts this website.
- An email provider handles messages sent to hello@inboxritual.com.
- Google (Google Analytics) measures website visits, only if you accept cookies.
- Meta (Facebook pixel) measures our ads, only if you accept cookies.
The email, hosting and email inbox providers process data only on our instructions. For data collected by the Facebook pixel, we and Meta are joint controllers, and Meta’s own privacy policy explains how Meta uses it. Ask us and we will tell you which providers we currently use. We may also disclose data if the law requires it.
6. International transfers
Our email service provider, Google and Meta are based in the United States, so your data may be processed there. These transfers rely on the EU-U.S. Data Privacy Framework (and its UK and Swiss extensions) or the European Commission’s Standard Contractual Clauses.
7. How long we keep it
- While you are subscribed, we keep your email and send time.
- When you unsubscribe, we stop emailing you straight away. We keep your email address on a do-not-email list so you are never added back by mistake (legitimate interests: respecting your unsubscribe). Ask us and we will delete it completely.
- If you never confirm your signup, your details are removed within 30 days.
- Replies are kept for up to 24 months, then deleted.
- Server logs are kept for up to 30 days.
- Analytics data is kept for 14 months, then deleted automatically.
8. Your rights
You can ask us to access, correct, delete or export your data, to restrict or object to how we use it, and you can withdraw consent at any time by unsubscribing. Withdrawing consent does not affect anything we did before. Email hello@inboxritual.com and we will reply within one month.
You can also complain to a data protection authority. Ours is the Bulgarian Commission for Personal Data Protection (cpdp.bg). If you live in the UK you can contact the Information Commissioner’s Office (ico.org.uk), and in the EU, the authority in your country.
9. Children
Inbox Ritual is not meant for anyone under 16, and we do not knowingly collect their data.
10. Security
The site uses HTTPS, and access to the subscriber list is limited to the people who run Inbox Ritual.
11. Changes
If we change this policy in a way that matters, we will update the date at the top and tell subscribers by email.