Privacy Policy

Last updated: August 18, 2026

This policy explains what personal data junkdiets.com collects, why, and what your rights are. The data controller is VET HOUM EOOD (a limited liability company registered in Bulgaria, UIC/EIK 205532752, registered office: 1000 Sofia, Bulgaria, Nikola Petkov Blvd., bl. 52, fl. 5, apt. 30; VAT ID BG205532752; email support@junkdiets.com) ("we", "us"). Contact: support@junkdiets.com.

1. What we collect

• Purchase data. Payments are processed by Stripe Payments Europe Ltd. ("Stripe"). Stripe processes your name, email, country and card details; we never see or store your card number. We receive your email address, the product purchased, the amount and the payment status so we can open your library access (your email is your key, no password).
• Quiz answers. If you use the quiz, your answers (age range, weight, activity, food preferences) are processed in your browser to calculate your numbers. They are not stored on our servers unless you submit them together with your email.
• Quiz results, waitlist and support emails. If you ask for your quiz numbers by email, join the waitlist or write to us, we store your email address, your quiz answers (calorie target, goal, chosen foods, sex, age range) and your message. Emails are sent through Brevo (Sendinblue GmbH, Germany). Every marketing email has a one-click unsubscribe link.
• Usage and advertising data. With your consent (in the EU/EEA, UK and Switzerland) or on the basis of legitimate interest (elsewhere) we use Google Analytics 4 and the Meta pixel with server-side Conversions API to understand how the site is used and to measure advertising. These set cookies and collect device and event data (pages viewed, buttons clicked, hashed email on conversion events). We also keep first-party, cookie-free funnel statistics (page views, quiz steps, checkout clicks) tied to a random browser identifier, without your name. IP addresses are used for approximate location and fraud prevention.

2. Why we process it (legal bases)

• To deliver the product you bought and manage your access: performance of a contract.
• To answer support requests: performance of a contract and legitimate interest.
• Analytics and advertising measurement: consent where required, otherwise legitimate interest in measuring and improving the product.
• Legal obligations, such as accounting records kept by the merchant of record.

3. Who we share it with

Only service providers that make the product work: Stripe (payments), Cloudflare (hosting, storage, email routing), Brevo (transactional and marketing email), Google (analytics), and Meta (advertising measurement). Some providers process data in the United States; transfers rely on the EU-US Data Privacy Framework or standard contractual clauses. We never sell your personal data.

4. How long we keep it

Purchase and access data: for as long as your access exists, plus the period required by Bulgarian tax and accounting law (up to 10 years for accounting records). Quiz and waitlist emails: until you unsubscribe or 24 months of inactivity. Support emails: up to 2 years. Analytics data: per Google Analytics retention settings (14 months). Cookie consent choice: stored in your browser until you clear it.

5. Your rights

Under the GDPR you can request access to, correction of, deletion of, or a copy of your personal data, restrict or object to processing based on legitimate interest, and withdraw consent at any time (for cookies: clear your browser storage for junkdiets.com and the banner will ask again). Email support@junkdiets.com; we answer within 30 days. You can also lodge a complaint with the Bulgarian Commission for Personal Data Protection (cpdp.bg, 2 Prof. Tsvetan Lazarov Blvd., 1592 Sofia) or with your local supervisory authority.

6. Cookies

Strictly necessary: jd_lib (your library access after you unlock with your email; expires after 1 year), jd_consent and jd_sid in local storage (your cookie choice and a random funnel identifier). These do not need consent.

Measurement and advertising (consent in the EU/EEA, UK and Switzerland): Meta pixel (_fbp, _fbc; up to 90 days) for measuring and optimising our ads on Facebook and Instagram, and Google Analytics 4 (_ga, _ga_*; up to 2 years) for aggregated site statistics. If you decline, these tags do not load and no data is sent to Meta or Google. You can change your choice at any time by clearing site data in your browser, which brings the banner back. Stripe sets its own cookies on the checkout page under Stripe's privacy policy.

7. Children

The product is intended for adults and is not directed at children under 16. We do not knowingly collect data from children.

8. Changes

If this policy changes materially, we will update this page and the date above. Continued use after changes means the updated policy applies.