SuccessSubliminals - Privacy Policy

This page explains what happens to your data when you use successsubliminals.com. It describes what this site actually does, service by service. If something here does not match what you see, please tell us and we will fix it.

The short version

The shop pages use no cookies of their own. The download signup uses a necessary session cookie to protect the form.
We count visits with two of our own tools. Both work without cookies, and neither one stores your IP address.
You can switch that counting off for your browser in one click. See Switching the counting off.
Payments run through SendOwl. We never see your card details.
Some pages load a form from Tally or a video thumbnail from YouTube. Those requests reach the companies named below.

Who is responsible

Andreas Breuninger
SuccessSubliminals
Hausäckerstraße 6
78166 Donaueschingen
Germany
Email: [email protected]

Full contact details are in the legal disclosure.

Reading the site

The site is hosted by ALL-INKL.COM (Neue Medien Münnich) on servers in Germany. Like every web server, it writes a log entry for each request. That entry holds your IP address, the page you asked for, the date and time, the page you came from and your browser identification. We use those logs to keep the site running and to investigate attacks or errors. They are kept for a short period and then deleted, and they are not combined with the counting described below.

Legal basis: Art. 6(1)(f) GDPR. Our legitimate interest is a site that stays online and secure.

How we count visits

We want to know which pages people read. We use two of our own tools for that, and both are built to work without identifying you.

Matomo. We run our own Matomo installation on our own infrastructure at analytics.donauwebdesign.de. Your visit is never sent to an advertising company. Matomo runs here with cookies switched off, and the server shortens every IP address by two bytes before storing it, so the stored address no longer points at your connection.

Our own page counter. Each page sends one small message to our Subliminal Studio server, which also runs in Germany. The message contains the path you opened, the domain you came from, a campaign tag if you followed a marked link, your browser language and the width of your window. It also records a few named clicks, such as opening a sound sample or going to checkout.

That message carries no cookie and no identifier from your device. To tell two visits apart on the same day, our server builds a short one-way fingerprint out of a secret, the current date, your IP address and your browser identification. Because the date is part of it, the fingerprint changes at midnight and visits on different days cannot be connected. Your IP address itself is never stored. What we keep is the path, the referring domain, the campaign tag, the language, a device class and that daily fingerprint, for 180 days.

Legal basis for both: Art. 6(1)(f) GDPR. Our legitimate interest is knowing which pages are worth keeping and improving.

Switching the counting off

Open any page of this site with ?notrack=1 at the end of the address, for example successsubliminals.com/?notrack=1. Your browser then stops sending anything to both tools, on every page, until you undo it with ?notrack=0. This works through a single flag stored in your browser, described in the next section.

Cookies and what stays on your device

The shop pages store no cookies of their own. They can store a flag called ss_no_track when you ask to switch off counting using the opt-out above. It holds nothing but the word that switches the counting off, it never leaves your device, and clearing your browser data removes it.

The download signup at updates.successsubliminals.com uses a necessary session cookie named __Host-ss-basic. It protects form submissions and remembers whether your request succeeded. It is not an advertising cookie and is set as a browser-session cookie.

Services embedded on some pages, and the community forum, may set their own cookies. Those are covered in the sections below.

Buying a subliminal

Orders are handled by SendOwl. When you click a buy button you go to SendOwl's checkout, where you enter your details and pay. SendOwl processes your name, email address and payment data as the payment provider, and then delivers your download. We receive the order and the email address that goes with it so we can deliver, answer questions and meet our bookkeeping duties. Card numbers never reach us.

On product pages the shopping cart script from SendOwl loads with the page so the cart works. See SendOwl's privacy policy.

Legal basis: Art. 6(1)(b) GDPR for the contract, and Art. 6(1)(c) GDPR for the tax and commercial retention periods we have to observe.

Writing to us, and leaving a review

The contact form in the help window and the review form both come from Tally, and each one loads as an embedded frame from tally.so. The contact form loads only after you open the Contact tab. What you type goes to Tally and reaches us from there. If you write a review from a product page, the form also carries the name of that program so we know what you are reviewing.

A published review shows the name you give us and your review text. Your email address stays private and is never published. See Tally's privacy policy.

Legal basis: Art. 6(1)(b) and Art. 6(1)(f) GDPR for answering you, and Art. 6(1)(a) GDPR for publishing a review, which you can withdraw at any time by writing to us.

Embedded media

Pages with sound samples show video thumbnails that your browser loads from YouTube, which belongs to Google. One page embeds a SoundCloud player. Loading those files tells YouTube or SoundCloud your IP address, and if you are logged in with them, they can connect the visit to your account there. Nothing plays until you start it.

See Google's privacy policy and SoundCloud's privacy policy.

Legal basis: Art. 6(1)(f) GDPR. Our legitimate interest is showing you what a program sounds like before you buy.

The free download and our emails

When you request the free Basic downloads, we use your email address to send the library link and the 10% discount code you requested. You can get these without joining our newsletter.

Release updates and occasional offers are a separate choice. That box starts unchecked. If you choose updates, we send a confirmation email. You join the list only when you press the confirmation button on the linked page. Every marketing email has an unsubscribe link.

You can also choose release updates in the SendOwl checkout. If you select that optional box, SendOwl passes your email address and signup request to our Mautic system for the same confirmation process. Buying a program does not automatically subscribe you to marketing.

We manage these requests in our own Mautic installation at updates.successsubliminals.com, hosted by Hetzner in Germany. Encrypted backups are stored separately with Hetzner. We send emails through Amazon Simple Email Service (SES), using its Frankfurt region. SES processes the recipient address, message and delivery information. We record delivery failures, complaints and unsubscribes so we can stop further messages to those addresses.

We previously used Mailchimp. Our existing account retains subscription and delivery history, and some old links still display a Mailchimp-hosted page that directs you to our current download page. The old Mailchimp signup forms are closed. Unsubscribe links in messages already sent by Mailchimp still use that service; we pass those unsubscribes and delivery blocks to Mautic so your preference continues to apply. We do not treat a purchase or a contact import as a new subscription. See Intuit Mailchimp's privacy information.

AWS's Data Processing Addendum forms part of its service terms. Where processing involves a transfer outside the EEA, the applicable safeguards include the EU Standard Contractual Clauses. Choosing Frankfurt does not exclude all international processing. See AWS's service terms and data processing provisions.

The signup uses a necessary session cookie to protect the form and remember whether your request succeeded. It is not used for advertising. We also store your request time and a protected hash of your IP address to limit repeated requests. Confirmation links expire after 48 hours.

The download and confirmation emails do not include an open-tracking pixel or individually tracked promotional links. The confirmation and unsubscribe links identify the request they act on. On the signup website, our cookie-free Matomo setup counts completed download requests and confirmed newsletter choices. Those events contain no email address or confirmation token, and they respect the site's tracking opt-out.

Temporary signup records and detailed delivery data for the download and confirmation emails are removed after 30 days. We keep the limited delivery reference needed for the unsubscribe link in an older email to keep working. Confirmation links stop working after 48 hours; their expired hashes in the signup database are removed within a further seven days. If this signup created your contact record and you only requested downloads, we remove that contact after 90 days without another request, provided there is no confirmed subscription, delivery block or other use of the contact.

We keep your newsletter preference and confirmation evidence while you subscribe, and the evidence for three years after we record your withdrawal, to document the permission under which we sent marketing. We retain the limited suppression information needed to respect an unsubscribe, complaint or delivery block. An unsubscribe stops marketing; it does not erase the block that prevents us from adding you again. You can contact us to ask about or remove your data.

Encrypted daily backups rotate separately: we keep 14 local copies and 30 off-host copies. Deleted data can remain in those older backups until they rotate out. They are used for recovery, not mailing. Following a recovery, we check current suppression and deletion records before enabling delivery.

The Basic library opens in Google Drive when you follow its link. Google's privacy policy then applies to that visit.

Legal basis: Art. 6(1)(b) GDPR for the delivery you request; Art. 6(1)(a) for optional marketing; and Art. 6(1)(f) for preventing misuse and respecting delivery blocks. You can withdraw marketing consent at any time.

The community forum

Our community forum is a separate application with its own accounts. Registering there stores the name, email address and password you choose, and the forum sets its own cookies to keep you logged in. Posts you write are public. Write to us if you want your forum account deleted.

Legal basis: Art. 6(1)(b) GDPR for running your account, and Art. 6(1)(f) GDPR for keeping the forum free of abuse.

Subliminal Studio

Subliminal Studio is our separate web app at studio.successsubliminals.com, with accounts, credits and its own privacy policy. Visiting this shop does not create an account there. See the Studio privacy policy.

Links to other places

We link to Etsy, YouTube, Rumble, Odysee, Facebook and X. Those are ordinary links. Nothing is sent to them until you click one, and after that their own privacy policies apply.

How long we keep things

Server logs: a short period, then deleted.
Page counting: 180 days, and it holds no IP address at any point.
Orders and invoices: as long as German tax and commercial law require, which is up to 10 years.
Messages you send us: until your question is settled, unless we have to keep them longer by law.
Published reviews: until you ask us to remove yours.

Your rights

You have the right to ask what data we hold about you and to receive a copy (Art. 15 GDPR), to have it corrected (Art. 16), to have it deleted (Art. 17), to have its use restricted (Art. 18), to receive it in a portable form (Art. 20), and to object to processing we base on our legitimate interest (Art. 21). Where we rely on your consent, you can withdraw it at any time with effect for the future.

One email to [email protected] is enough for any of these.

You can also complain to a data protection authority (Art. 77 GDPR). For us that is the Landesbeauftragter für den Datenschutz und die Informationsfreiheit Baden-Württemberg, but you may also go to the authority where you live.

Changes

When we add or drop a service, we update this page. This version is from 12 September 2026.

See also our terms of use, our disclaimer and the legal disclosure.