Who runs subding
subding is a keyword-alert service for Reddit, built and run by a small independent team based in the United Kingdom. We are the people responsible for your personal data, which under UK data protection law makes us the data controller. We are not a registered company, so there is no legal entity behind the name yet, just the founders. You can reach us at hello@subding.com. subding is not affiliated with Reddit, Inc.
The short version
- We collect the little we need to run the service: your account, the keywords you track, where you want alerts sent, and how you use the site.
- We use Google Analytics and PostHog to understand traffic and how the site is used. They set cookies. You can opt out in your browser.
- We never sell your data, and we never use Reddit content to train AI.
- You can ask to see, correct or delete your data at any time. Email hello@subding.com.
What we collect
We try to hold as little as we can get away with. In practice that is:
- Your account. Your name and email address, set up when you sign up with email or a Google account. If you sign in with Google we never see your Google password.
- Your setup. The keywords you choose to track, and the places you want alerts delivered: a Slack workspace, a Discord server, a webhook address or an email inbox.
- Billing details. When you subscribe, payment is handled by Stripe, our payment provider. We can see your plan and its status, but your card details go straight to Stripe, so we never see or store your full card number.
- The alerts themselves. When one of your keywords comes up on Reddit, we hold a short excerpt of the matching post or comment, a link back to it, and the author's username, for as long as we need to send and show you the alert.
- Usage data. How you use the site and app: the pages you visit, where you arrived from, the buttons you click, your device and browser, and a rough location worked out from your IP address. This comes via Google Analytics and PostHog. PostHog may also record an anonymised replay of a visit (mouse movement, clicks and scrolling) to help us spot what is confusing. It masks anything you type, so we never see what you enter into a field.
- Anything you send us. Emails and support messages, so we can help you and keep a record of the conversation.
Cookies and analytics
We keep cookies light. The site uses Google Analytics 4 and PostHog to understand how people find and use subding, which helps us decide what to build next. Both act as our processors and set the cookies below. They start collecting when you visit, so if you would rather they did not, block cookies in your browser or install Google's opt-out add-on before you look around.
| Cookie | Set by | What it does | Roughly lasts |
|---|---|---|---|
| _ga | Google Analytics | Tells one visitor apart from another | 2 years |
| _ga_<id> | Google Analytics | Keeps track of your session | 2 years |
| ph_*_posthog | PostHog | Tells one visitor apart from another and keeps track of the visit | 1 year |
We do not use cookies for advertising, and we do not follow you around the rest of the web. You can turn off tracking any time using the controls above, and it will not stop subding working.
Why we are allowed to use it
UK data protection law asks us to have a lawful basis for everything we do with your data. Ours are straightforward:
- To run the service you asked for. Your account, your keywords, your alerts and your billing all exist because you signed up for them. That is the contract between us.
- Our legitimate interests. Keeping the service secure, understanding how it is used, and improving it. We weigh these against your rights, and they never override them.
- Your consent, where the law needs it, which you can withdraw at any time.
Reddit content, handled carefully
subding watches public posts and comments on Reddit for the keywords you choose and tells you when one matches. It is read-and-notify. We never post, comment, vote or send messages on Reddit, on your behalf or anyone's.
When we show you a match, we show a short excerpt, a link back to the original on Reddit, and the author's username, so you can go and read it in its proper context. We do not build profiles of Reddit users, we do not run sentiment scoring, and we never use Reddit content to train or fine-tune AI or machine-learning models.
We also respect what happens on Reddit. If a Reddit user or Reddit itself removes a post or comment, we remove it from subding as soon as we reasonably can, and we routinely clear matched content we no longer need. We keep only what is necessary to deliver your alerts, and no more.
Who we share it with
We do not sell your data, and we do not hand it to anyone who is not helping us run subding. The services we rely on are:
- Our hosting and infrastructure provider, which runs the app and stores its data.
- Stripe, our payment provider, which takes and processes your subscription payments.
- Google Analytics and PostHog, for the usage statistics and anonymised session replays described above.
- The places you send alerts. When you set up delivery to Slack, Discord, a webhook or an email address, we pass your alerts to those destinations because you told us to, and nowhere else.
We may also disclose data if the law genuinely requires it, for example a valid court order. We would push back on anything that overreached.
Sending data abroad
Some of the providers we use, such as Google, are based outside the UK. When your data is processed overseas, we rely on the safeguards the law recognises, such as UK approved standard contractual clauses or an adequacy decision, so your data keeps the same protection it has here.
How long we keep it
- Your account and setup: while your account is open, then deleted within a reasonable period after you close it.
- Matched Reddit content: only as long as we need it to deliver and show the alert, and removed promptly whenever the original is deleted on Reddit.
- Analytics data: for a limited window, set within Google Analytics and PostHog rather than kept indefinitely. Our PostHog data is held in the EU.
- Billing records: a little longer where the law requires us to keep them, for example for tax.
Your rights
The law gives you real control over your data. You can ask us to show you what we hold, correct anything wrong, delete it, hand it over in a portable form, or stop or limit how we use it, and you can withdraw consent where you gave it. To do any of that, email hello@subding.com and we will sort it, normally within a month.
If you think we have got something wrong, you can complain to the Information Commissioner's Office at ico.org.uk. We would much rather you told us first so we can put it right.
Security
We take sensible steps to protect your data, and we work with providers that do the same. No service can promise perfect security, but if something ever goes wrong that puts your data at risk, we will tell you and the regulator where the law requires it.
Children
subding is a tool for businesses and is not meant for children. You need to be at least 18 to use it, and we do not knowingly collect data about anyone under that age.
Changes to this policy
As subding grows, this policy will change with it. When it does, we will update the date at the top, and for anything significant we will let you know rather than expect you to notice.
Contact
Questions about your data, or anything on this page, go to hello@subding.com. A person reads that inbox.