Privacy Policy

This policy explains what data FreeSpy stores, why we store it, and what your rights are under Brazil's General Data Protection Law (LGPD, Law 13.709/2018) and, if you are in the European Economic Area or the United Kingdom, under the General Data Protection Regulation (GDPR).

What we store

• Account: username, name, password (stored as a hash, never in plain text), and who referred you, if applicable. If you sign in with Google, we receive your name, email, profile photo, and Google account identifier; we do not access anything else in your Google account. To disconnect, go to My account → Edit profile → Access or revoke access at myaccount.google.com/permissions.
• What you post: topics, comments, reviews, marketplace listings, and messages.
• Emails: your account's email address and the date you confirmed it. We also keep a record of the emails we send you (type, date, and whether it was delivered) for 1 year; the content of each email is deleted after 90 days.
• Purchases and sales: orders, amounts, status, and payment details you provide.
• Forms: information you submit through contact and partnership forms.
• Website usage: pages visited, referring page, and screen width, linked to a random identifier stored in your browser. This measurement is ours and is stored on our servers.
• Google Analytics (only with your OK): if you turn on Measurement in the cookie notice, Google Analytics 4 receives pages viewed, search terms, clicks, sign-ups, logins, and purchases (amount and plan), along with a random identifier and a scrambled account code. We never send your email, name, password, or messages. We do not use a Meta pixel.

Cookies and local storage

We use a session cookie to keep you logged in and a visitor cookie. When you sign in with Google, a temporary cookie (g_state, for up to 10 minutes) protects the login and is then deleted. We store the anonymous usage identifier, referral code (for up to 60 days), and your display preferences in your browser's local storage. Your choice in the cookie notice is stored in the cs_ck cookie (1 year).

The cookies below are only set if you allow them in the notice, and you can change your choice at any time using the Cookies link in the footer and menu:

• Measurement: _ga and _ga_* (Google Analytics 4, up to 13 months).
• Marketing: _gcl_au (Google Ads, up to 90 days), to determine whether a new account came from a FreeSpy ad. We do not display ads on the platform.

If you decline, no Google scripts are loaded. If you turn them off later, we delete these cookies from your browser.

How we use your data

To operate your account, facilitate purchases with protected payments, moderate the community, pay referral commissions, respond to inquiries, and improve the product. We do not sell your data.

Emails you receive

Account and security emails (confirmation code, welcome, password reset link, password or email changed notices) and payment emails always reach you, because they are part of the service. All others (Marketplace, Monitor alerts, Community digest, and tips) include a link in the footer to stop receiving them. We do not track opens or clicks in our emails.

Who we share data with

Only with parties necessary to provide the service, such as our hosting and storage infrastructure; with Google (Analytics and Ads) when you allow it in the cookie notice; and with authorities when required by law. Your public profile and anything you post are visible to other members.

To show the community in your language, public content (topics, replies, stories, and marketplace descriptions) is automatically translated by an AI provider (OpenAI). Private messages are sent for translation only when you click "Translate."

FreeSpy emails are sent and received through Resend, which processes your address and the content of each message only to deliver or receive it.

How long we keep your data

For as long as your account exists. Purchase records are kept for the period required by law. The record of emails sent is kept for 1 year. Anonymous usage data is aggregated and discarded over time.

Your rights

You can request access to, correction, portability, or deletion of your data, and withdraw your consent. Submit your request through the contact page and include your username. We respond within 15 days.

If you are in the European Union, the European Economic Area or the United Kingdom (GDPR)

Controller: Gboss GLD LLC, 418 Broadway Ste N, Albany, NY 12207, USA, team@freespy.io.

Legal bases: performance of a contract, to run your account, purchases with protected payment, referral commissions, and account and payment emails; consent, for Google Analytics and Google Ads (which only load if you allow them in the cookie notice) and for translating private messages you ask us to translate; legitimate interests, for our own usage measurement, security, fraud prevention, community moderation, and the emails you can turn off from the footer; and legal obligation, to keep purchase records.

International transfers: FreeSpy is operated from the United States, and the providers named in this policy process data in the United States and in other countries.

Your GDPR rights: access, rectification, erasure, restriction of processing, portability, and objection to processing based on legitimate interests, plus withdrawing consent at any time without affecting what was done before. Send your request through the contact page. You can also lodge a complaint with the data protection authority of the country where you live or work.