Privacy & Cookies Policy
How Softoto collects, uses, and protects your personal information across our Software Library and Blog.
Who We Are (Data Controller)
Softoto is a trading name of Eurl Nitrosoft LTD, a company registered in England and Wales (company number 16294173).
We are an independent publisher covering software and technology. Currently, we operate two main services:
The Software Library is a free collection of popular, verified applications for Windows, macOS, Android, and iOS. The Blog offers independent articles, how-to guides, reviews, and cybersecurity news.
We do not sell software licenses or process payments at this time. If and when we introduce e-commerce features, this policy will be updated accordingly.
This policy applies to all services under the Softoto brand, including our Software Library and Blog.
What Information We Collect & How
We collect information in two ways, corresponding to how you use our site:
a) Information You Give Us Directly
π¦ Software Library
- You do not need an account to download software.
- If you use our "Submit Software" page β either to request a title or to submit software you build or own β we collect the details you provide about that software (name, download or website URL, platform, category, licence type, and any description or notes) together with your contact email address.
- If you are submitting software you build or own, we also collect your developer or company name and any logo file you choose to upload.
- If you use our "Report a Broken Link" form, we collect the software name, the page URL, the platform, a description of the problem, and your email address, solely to investigate and tell you when it is fixed.
- We use this information solely to review the request or submission, publish the listing if it is accepted, and contact you about it.
- We do not store download history or associate downloads with your identity.
βοΈ Blog & Editorial
- Newsletter: When you subscribe, we collect your email address and (if provided) your name. Consent is explicit and you can unsubscribe with one click.
- Comments: If you leave a comment on an article, we collect your name (or pseudonym), email address (private, not displayed), and the comment content. Your name and comment are public.
- Contact forms: When you use our general contact form, we collect your name, email, and the content of your message.
All fields marked with an asterisk (*) are mandatory; omission may prevent us from assisting you.
b) Information We Collect Automatically (Cookies & Analytics)
We use a small number of cookies and similar technologies to:
- Ensure the website functions properly and serves pages correctly.
- Remember your cookie consent choice.
- Protect our forms against spam and abuse.
- Understand, with your consent, how visitors use the site so we can improve it.
For full details, see Section 7: Cookies Policy.
How We Use Your Information
We process your personal data only when we have a valid legal reason, in full transparency:
| Purpose | Legal Basis (GDPR) | Region |
|---|---|---|
| To respond to your inquiries (broken links, software requests and submissions, general contact) | Legitimate Interest (to assist users) | All regions |
| To send you our newsletter (blog updates, software news, cybersecurity alerts) | Consent (you opt in) | All regions |
| To manage and display comments on our blog | Legitimate Interest (community engagement) | All regions |
| To analyse site traffic and improve our library and blog | Consent (analytics cookies are only set if you accept them) | All regions |
| To protect our website from fraud, spam, and cyber attacks | Legitimate Interest | All regions |
| To comply with legal obligations (e.g., data subject rights requests) | Legal Obligation | All regions |
Legitimate Interest Assessment (LIA): We balance our interest in running a secure, helpful, and continuously improving website against your privacy rights. You may object to any processing based on legitimate interest by contacting us.
- We do not sell or rent your personal data to third parties.
- We do not use your data for automated decision-making or profiling with legal effects.
- We do not process payment information (no store yet).
Data Sharing & International Transfers
We do not sell your personal data. Period.
We share data only in these specific circumstances:
| Recipient | Purpose | Safeguards |
|---|---|---|
| Our web host (Hostinger) and DNS provider (Cloudflare) | To host the website and route traffic to it | SCCs in place where data leaves the UK/EU. |
| Google Analytics | To understand how visitors use the site β only if you accept analytics cookies | International. SCCs in place; no personal identifiers collected. |
| CookieYes | To display our consent banner and keep a record of consent choices | GDPR compliant / SCCs in place. |
| Our email provider | To deliver newsletters and messages sent through our forms | GDPR compliant / SCCs in place. |
| Legal authorities | To comply with valid legal requests (subpoenas, court orders) | Applicable law. |
International Transfers: Some of the service providers we use may be located outside the United Kingdom. Where your data is transferred internationally, we rely on UK/EU Standard Contractual Clauses to ensure it remains protected to GDPR standards, regardless of where it is processed.
How Long We Keep Your Data
We follow the principle of storage limitation:
| Data Type | Retention Period |
|---|---|
| Newsletter subscriber email | Until you unsubscribe. |
| Contact, submission and broken-link form messages | 24 months after the issue is resolved. |
| Blog comments | Retained indefinitely as part of the public conversation, but you may request deletion. |
| Website analytics | As configured in Google Analytics (up to 14 months), then automatically deleted. |
| Cookie consent records | 12 months, then you are asked again. |
| Log files (server, security) | 90 days, then deleted or anonymised. |
After these periods, data is securely deleted or anonymised.
Your Rights
We respect your privacy rights. Under the UK GDPR and GDPR-aligned laws, you have the following rights:
How to Exercise Your Rights:
- Email: contact@softoto.com
- Web Form: Contact page
- Post: Eurl Nitrosoft LTD, 71-75 Shelton Street, Covent Garden, London WC2H 9JQ, United Kingdom
We will respond within 30 days.
You also have the right to lodge a complaint with a data protection authority. In the United Kingdom, this is the Information Commissioner's Office (ICO). If you are in the EU, you may contact your local supervisory authority.
Cookies Policy
We use a small number of cookies to make Softoto work and, with your permission, to understand how the site is used. Non-essential cookies are only set after you accept them.
π§ Manage Your Cookie Preferences
You can change your cookie settings at any time by clicking the "Cookie Settings" button in the corner of any page. Our consent banner is provided by CookieYes.
β Necessary Cookies (Always On)
These are essential for the site to function and cannot be switched off:
- Remembering your cookie consent choice (
cookieyes-consent). - Serving cached pages correctly (
_lscache_vary). - Protecting our forms against spam and cross-site request forgery.
- Keeping you signed in, if you have an account with us.
π Analytics Cookies (Consent Required)
We use Google Analytics to understand how visitors use the site β which pages are read, which software is looked up, and where people run into problems.
These cookies are only set if you accept them. We do not use this data to identify you personally, and we never sell it.
π« What We Don't Use
- No advertising cookies.
- No third-party tracking pixels β no Facebook Pixel, no ad networks.
- No cross-site profiling or behavioural ad targeting.
- No selling of your data to anyone, ever.
βοΈ How to Manage Cookies
Beyond our own banner, you can control cookies through your browser settings. Blocking necessary cookies may stop parts of the site working correctly.
Learn how here:
Security
We implement appropriate technical and organisational measures to protect your data, including:
- SSL/TLS encryption (HTTPS) for all data in transit.
- Regular security updates and monitoring.
- Strict access controls β only authorised personnel can access personal data, and only to perform their job functions.
- No storage of sensitive payment data (as we do not process payments).
While no system is 100% secure, we follow industry best practices and promptly address any vulnerabilities.
Children's Privacy
Softoto is not directed at children under 16. We do not knowingly collect personal information from minors. If you are a parent and believe your child has provided us with data, please contact us immediately, and we will delete it.
Future E-Commerce & Policy Updates
Softoto currently operates a free Software Library and an independent Blog. We do not sell software licenses or process payments.
If and when we introduce a Store (e-commerce, license sales, paid subscriptions), this privacy policy will be updated significantly to reflect:
- Collection of billing addresses and payment information (via PCI-DSS compliant partners).
- Order history and customer account management.
- New legal bases (contract performance) and retention periods (tax obligations).
- Additional rights and disclosures.
We will notify all active newsletter subscribers and display a prominent notice on our website before such changes take effect.
Changes to This Policy
We may update this policy to reflect changes in our practices or legal requirements. We will notify you of material changes via email (if we have your address) or a prominent notice on our website.
Last Updated: 7 August 2026
Contact Information
If you have any questions about this Privacy & Cookies Policy, please contact us:
contact@softoto.com β General privacy inquiries
By Post:
Covent Garden London
WC2H 9JQ, United Kingdom