Version 1.2 – Blog & Library Only

Privacy & Cookies Policy

How Softoto collects, uses, and protects your personal information across our Software Library and Blog.

Last Updated: 17 July 2026
Section 01

Who We Are (Data Controller)

Softoto is a trading name of Eurl Nitrosoft LTD, a company registered in England and Wales (company number 16294173).

We are a team of software enthusiasts and technology writers. Currently, we operate two main services:

📦 Software Library
✍️ Blog & Editorial

The Software Library is a free collection of popular, verified applications for Windows, macOS, Android, and iOS. The Blog offers independent articles, how-to guides, reviews, and cybersecurity news.

We do not sell software licenses or process payments at this time. If and when we introduce e-commerce features, this policy will be updated accordingly.

⚖️ Data Controller Details
Controller: Eurl Nitrosoft LTD (company number 16294173)
Registered Address: 71-75 Shelton Street, Covent Garden, London WC2H 9JQ, UNITED KINGDOM

This policy applies to all services under the Softoto brand, including our Software Library and Blog.


Section 02

What Information We Collect & How

We collect information in two ways, corresponding to how you use our site:

a) Information You Give Us Directly

📦 Software Library

  • You do not need an account to download software.
  • If you use our "Submit Software" page — either to request a title or to submit software you build or own — we collect the details you provide about that software (name, download or website URL, platform, category, licence type, and any description or notes) together with your contact email address.
  • If you are submitting software you build or own, we also collect your developer or company name and any logo file you choose to upload.
  • We use this information solely to review the request or submission, publish the listing if it is accepted, and contact you about it.
  • We do not store download history or associate downloads with your identity.

✍️ Blog & Editorial

  • Newsletter: When you subscribe, we collect your email address and (if provided) your name. Consent is explicit and you can unsubscribe with one click.
  • Comments: If you leave a comment on an article, we collect your name (or pseudonym), email address (private, not displayed), and the comment content. Your name and comment are public.
  • Contact forms: When you use our general contact form, we collect your name, email, and the content of your message.

All fields marked with an asterisk (*) are mandatory; omission may prevent us from assisting you.

b) Information We Collect Automatically (Cookies & Analytics)

Like almost all websites, we use cookies and similar technologies to:

  • Ensure our website functions properly (e.g., remembering your region for download mirrors).
  • Analyse traffic and user behaviour to improve our software library and blog content.
  • Protect our site against malicious activity and fraud.
  • Personalise your experience (e.g., recommending popular software in your region).

For full details, see Section 7: Cookies Policy.


Section 03

How We Use Your Information

We process your personal data only when we have a valid legal reason, in full transparency:

Purpose Legal Basis (GDPR) Region
To respond to your inquiries (broken downloads, software requests, general contact) Legitimate Interest (to assist users) All regions
To send you our newsletter (blog updates, software news, cybersecurity alerts) Consent (you opt in) All regions
To manage and display comments on our blog Legitimate Interest (community engagement) All regions
To analyse site traffic and improve our library and blog Legitimate Interest All regions
To protect our website from fraud, spam, and cyber attacks Legitimate Interest All regions
To comply with legal obligations (e.g., data subject rights requests) Legal Obligation All regions

Legitimate Interest Assessment (LIA): We balance our interest in running a secure, helpful, and continuously improving website against your privacy rights. You may object to any processing based on legitimate interest by contacting us.

✓ We do not sell your data
  • We do not sell or rent your personal data to third parties.
  • We do not use your data for automated decision-making or profiling with legal effects.
  • We do not process payment information (no store yet).

Section 04

Data Sharing & International Transfers

We do not sell your personal data. Period.

We share data only in these specific circumstances:

Recipient Purpose Safeguards
Email service providers (e.g., Mailchimp, SendGrid, Brevo) To deliver newsletters and transactional emails International. GDPR compliant / SCCs in place.
Cloud hosting & CDN providers (e.g., AWS, Cloudflare, Google Cloud) To host our website, serve downloads, and cache content globally SCCs in place where data leaves the UK/EU.
Analytics providers (e.g., Google Analytics, Plausible) To understand anonymous usage patterns Anonymised by default; IP masking enabled.
Legal authorities To comply with valid legal requests (subpoenas, court orders) Applicable law.

International Transfers: Some of the service providers we use may be located outside the United Kingdom. Where your data is transferred internationally, we rely on UK/EU Standard Contractual Clauses to ensure it remains protected to GDPR standards, regardless of where it is processed.


Section 05

How Long We Keep Your Data

We follow the principle of storage limitation:

Data Type Retention Period
Newsletter subscriber email Until you unsubscribe.
Contact form / support inquiries 24 months after the issue is resolved.
Blog comments Retained indefinitely as part of the public conversation, but you may request deletion.
Website analytics (anonymised) Indefinitely (non-identifiable).
Log files (server, security) 90 days, then deleted or anonymised.

After these periods, data is securely deleted or anonymised.


Section 06

Your Rights

We respect your privacy rights. Under the UK GDPR and GDPR-aligned laws, you have the following rights:

AccessRequest a copy of your data.
RectificationCorrect inaccurate data.
ErasureDelete your data (Right to be Forgotten), subject to legal retention requirements.
RestrictionTemporarily stop us from processing your data.
PortabilityReceive your data in a machine-readable format.
ObjectionObject to processing based on legitimate interest (including marketing).
Withdraw ConsentAt any time, for consent-based processing (e.g., newsletter).

How to Exercise Your Rights:

We will respond within 30 days.

You also have the right to lodge a complaint with a data protection authority. In the United Kingdom, this is the Information Commissioner's Office (ICO). If you are in the EU, you may contact your local supervisory authority.


Section 07

Cookies Policy

We use cookies to make Softoto work, protect your security, and improve your experience. By continuing to browse, you agree to our use of cookies as described below.

⚙️ How to Manage Cookies

You can control cookies through your browser settings. Disabling necessary cookies will break core site functionality (e.g., download mirrors may not work correctly).

Learn how here:


Section 08

Security

We implement appropriate technical and organisational measures to protect your data, including:

  • SSL/TLS encryption (HTTPS) for all data in transit.
  • Regular security updates and monitoring.
  • Strict access controls – only authorised personnel can access personal data, and only to perform their job functions.
  • No storage of sensitive payment data (as we do not process payments).

While no system is 100% secure, we follow industry best practices and promptly address any vulnerabilities.


Section 09

Children's Privacy

Softoto is not directed at children under 16. We do not knowingly collect personal information from minors. If you are a parent and believe your child has provided us with data, please contact us immediately, and we will delete it.


Section 10

Future E-Commerce & Policy Updates

Softoto currently operates a free Software Library and an independent Blog. We do not sell software licenses or process payments.

If and when we introduce a Store (e-commerce, license sales, paid subscriptions), this privacy policy will be updated significantly to reflect:

  • Collection of billing addresses and payment information (via PCI-DSS compliant partners).
  • Order history and customer account management.
  • New legal bases (contract performance) and retention periods (tax obligations).
  • Additional rights and disclosures.

We will notify all active newsletter subscribers and display a prominent notice on our website before such changes take effect.


Section 11

Changes to This Policy

We may update this policy to reflect changes in our practices or legal requirements. We will notify you of material changes via email (if we have your address) or a prominent notice on our website.

Last Updated: 17 July 2026


Section 12

Contact Information

If you have any questions about this Privacy & Cookies Policy, please contact us:

✉️ Email

contact@softoto.com – General privacy inquiries

By Post:

🇬🇧 United Kingdom
Eurl Nitrosoft LTD
71-75 Shelton Street
Covent Garden London
WC2H 9JQ, United Kingdom