Effective date: October 16, 2026
The controller of your personal data is Kristjan Mestnik s.p., Ljubljanska cesta 38b, 1293 Šmarje-Sap, Slovenia, EU, tax/VAT number SI75401525. Contact: [email protected].
This policy is published on hustlerspot.com and its subdomains (including bridge.hustlerspot.com), but it covers: hustlerspot.com (including bridge pages such as /bridge-a.html); all emails we send, from every sending domain we use; and the tracking domains listed in section 2a; together with the related link-tracking and lead-handling systems.
| Data | Source | Purpose | Legal basis (GDPR) |
|---|---|---|---|
| Email address and lead source name; date and time first received | Our co-registration partner IntuList, after you submitted your details on a partner website and agreed to receive partner offers [PLACEHOLDER: confirm consent wording on IntuList partner forms] | Sending promotional emails; duplicate detection; suppression of people who opted out | Consent (Art. 6(1)(a)) for sending emails; legitimate interest (Art. 6(1)(f)) for duplicate detection and suppression |
| Click data: time of click, link clicked, IP address, browser/user agent, referrer, a click ID | Our link-tracking server, on the tracking domains listed in section 2a, when you click a link in an email (and when you click a link on this site) | Routing you to the offer, counting clicks, filtering bots, attributing affiliate commissions | Legitimate interest (Art. 6(1)(f)) |
| Rotator cookie (see section 6) | Your browser | Sending you to the same offer on repeat visits | [PLACEHOLDER: confirm basis: strictly necessary vs. consent] |
| Email opens and clicks inside emails | AWeber | Measuring which emails are relevant; list hygiene | Legitimate interest (Art. 6(1)(f)) |
hustlerspot.com, including /bridge-a.html, does not collect email addresses. Email addresses reach us only through IntuList co-registration. We do not use any analytics tools or advertising pixels (such as Google Analytics or the Meta Pixel) on hustlerspot.com or on our tracking domains.
We do not ask for, and do not want, sensitive data such as health, religious, or financial account information.
Links in our emails and on hustlerspot.com do not point directly to offer pages. Clicks are handled on our tracking domains, all operated by Kristjan Mestnik s.p. and served by our link-tracking server in the United States (via Cloudflare). There the click is recorded and the rotator cookie (section 6) is set, before you reach hustlerspot.com or any offer page. Our tracking domains are trackingbullet.com and the following go.* domains:
Email addresses are stored in encrypted form on our lead-handling server. Access to systems is restricted, and connections are encrypted in transit (HTTPS). Our internal statistics and reporting tools never expose email addresses. No system is perfectly secure, but we take reasonable technical and organisational measures to protect your data.
| Recipient | Role | Location |
|---|---|---|
| IntuList | Co-registration partner that provides the lead (email + lead source) | [PLACEHOLDER: IntuList location] |
| AWeber Communications | Email service provider: stores contact details, sends emails, records opens, clicks, and unsubscribes | United States |
| Contabo GmbH | Hosting of our lead-handling server | European Union |
| Link-tracking server | Records click data and routes clicks | United States [PLACEHOLDER: hosting provider of tracker] |
| Cloudflare, Inc. | Network, security and content delivery; web traffic passes through Cloudflare | United States / global network |
| Affiliate networks CashNetwork and Vertex | Receive a click ID (and the technical data their own sites collect when you arrive) so they can attribute sales and pay commissions. We do not send them your email address. | [PLACEHOLDER: locations of CashNetwork and Vertex] |
Offers you reach through our links are operated by third parties with their own privacy policies. Please read them before entering information on their sites.
Some recipients (including AWeber, Cloudflare and our link-tracking server) are located in the United States, so personal data, including click data, is transferred outside the European Economic Area. These transfers rely on [PLACEHOLDER: confirm transfer mechanism, e.g. EU-US Data Privacy Framework certification and/or Standard Contractual Clauses]. You can ask us for a copy of the relevant safeguards.
When you click through our offer rotator, we set a "sticky" rotator cookie on the tracking domain you clicked through (section 2a), before you reach hustlerspot.com. It remembers which offer you were sent to, so that you see the same offer if you come back. It contains a rotator/offer identifier, not your name or email. Lifetime: [PLACEHOLDER: cookie name and lifetime]. Affiliate networks and offer websites may set their own cookies under their own policies. We do not use analytics or advertising cookies.
If you ask for deletion, we delete your data except for a minimal suppression record (your email address and when it was first received), which is kept only to make sure you are not contacted again.
Under the GDPR you can ask for access, correction, deletion, restriction of processing, data portability, and you can object to processing based on legitimate interest. Where processing is based on consent, you can withdraw consent at any time (for emails: use the unsubscribe link in any email). Withdrawing consent does not affect processing that took place before. Write to [email protected], preferably from or mentioning the address concerned. We reply within one month.
You may also complain to a supervisory authority. In Slovenia this is the Information Commissioner (Informacijski pooblaščenec RS, www.ip-rs.si), or the authority where you live or work.
Our emails are advertisements, identify the sender, include our physical postal address, and contain a working unsubscribe link. Unsubscribe requests are honored promptly, free of charge, and require nothing beyond your email address.
This site and our emails are intended for adults. We do not knowingly collect data from anyone under 18. If you believe a minor's data has reached us, contact us and we will delete it (keeping only a suppression record).
We may update this policy. The effective date at the top shows the latest version.