Browse Favorites Playlists Watch history

Privacy Policy

Last updated: September 19, 2026

1. Controller

The controller responsible for processing personal data under the General Data Protection Regulation (GDPR) is:

Nicole May, trading as Salted Strength Club
Sole proprietorship (Einzelunternehmen)
c/o Christian Jahnke
Gulisastraße 93
56072 Koblenz
Germany

Email: hello@saltedstrengthclub.com
Website: https://saltedstrengthclub.com

For questions about this Privacy Policy or the processing of your personal data, please contact us using the email address above.


2. Scope of This Privacy Policy

This Privacy Policy explains how Salted Strength Club (“SSC,” “we,” “us,” or “our”) collects and processes personal data when you:


  • Visit our public website;

  • Use our Uscreen membership platform;

  • Create or manage an account;

  • Start a free trial or purchase a membership;

  • Watch or interact with our training content or community features;

  • Contact us; or

  • Subscribe to or receive communications from us.

Personal data means any information relating to an identified or identifiable individual.


3. How We Collect Personal Data

We collect personal data:


  • Directly from you when you create an account, purchase a membership, contact us, or interact with the service;

  • Automatically when you visit our website or use the membership platform; and

  • From service providers involved in delivering the website, membership, payment, and communication services.


4. Website Hosting and Technical Data

Our public website is created and hosted using Showit, provided by Showit, Inc.

When you visit the website, technical data may be processed to display the site securely and reliably. This may include:


  • IP address;

  • Date and time of access;

  • Pages and files requested;

  • Browser and device information;

  • Operating system;

  • Referring page or website; and

  • Technical error and security information.

This processing is necessary to provide the website and protect it against technical failures, misuse, and unauthorized access.


The legal basis is Article 6(1)(f) GDPR. Our legitimate interests are operating a secure, reliable, and functional website.


Showit may use hosting and infrastructure providers located outside the European Economic Area. More information is available in Showit’s Privacy Policy.


5. Contacting Us

You can contact us at hello@saltedstrengthclub.com.


If you contact us, we process the information you provide, which may include:


  • Your name;

  • Email address;

  • The content of your message;

  • Attachments; and

  • Related correspondence.

We use this information to answer your request and provide customer support.

The legal basis is Article 6(1)(b) GDPR where your message concerns a current or potential membership or other contractual matter. For general inquiries, the legal basis is Article 6(1)(f) GDPR. Our legitimate interest is responding to communications concerning SSC and its services.


Our business email is hosted using Spacemail, provided by Spaceship. Email content and associated technical data are therefore processed through this provider. Spacemail may automatically scan messages for spam, malware, phishing, and other harmful activity.


Please do not send sensitive medical or health information by email unless it is necessary for us to address your request.

6. Uscreen Membership Platform

Our membership platform, video library, account system, checkout, and member features are provided through Uscreen, operated by Uscreen.TV, LLC.


When you create or use an SSC membership account, the following information may be processed:


  • Name;

  • Email address;

  • Account and authentication information;

  • Country and approximate location;

  • Subscription and free-trial information;

  • Purchases, invoices, payments, and transaction history;

  • Membership status and renewal dates;

  • Content viewed and viewing progress;

  • Workout or program completion activity;

  • Favorites, playlists, and viewing history;

  • Community posts, comments, profile information, and other content you choose to provide;

  • Customer-support communications;

  • IP address;

  • Browser and device information;

  • Login and session information;

  • Referring URLs and campaign information; and

  • Security and fraud-prevention data.

We use this information to:


  • Create and administer your account;

  • Provide access to purchased content;

  • Operate the seven-day free trial;

  • Manage subscriptions, renewals, and cancellations;

  • Save workout progress and account preferences;

  • Provide community and member features;

  • Process payments and maintain transaction records;

  • Provide customer support;

  • Detect misuse, fraud, or unauthorized account access; and

  • Maintain and improve the operation of the membership service.

Processing required to create an account, administer a trial, or provide a membership is based on Article 6(1)(b) GDPR.


Processing required for tax, accounting, consumer-protection, or other legal obligations is based on Article 6(1)(c) GDPR.

Security, fraud prevention, service administration, and protection of our legal rights are based on Article 6(1)(f) GDPR.


Uscreen processes subscriber data on our behalf as a data processor. Uscreen and its subprocessors may process personal data in the United States and other countries outside the European Economic Area, subject to the safeguards described in Section 15. More information is available in Uscreen’s Privacy Policy.


Certain account information is required to create an account or purchase a membership. If you do not provide that information, we may be unable to create your account, process your membership, or provide the requested service.


7. Community Content

If you use community, commenting, or other interactive features, your profile information and the content you submit may be visible to other members.


Do not publish medical information, payment details, private contact information, or other sensitive personal data in public or member-visible areas.


Community content is processed to provide the interactive membership features you choose to use. The legal basis is Article 6(1)(b) GDPR.


We may remove or restrict content where necessary to enforce our Terms of Service, protect other users, maintain platform security, or comply with legal obligations. The legal bases are Articles 6(1)(c) and 6(1)(f) GDPR.


8. Payments and Stripe

Membership payments are processed through Stripe.


When you enter payment information at checkout, it is transmitted to Stripe.

Depending on the payment method, Stripe may process:


  • Name;

  • Billing address;

  • Email address;

  • Country;

  • Payment-card or payment-account information;

  • Transaction amount and currency;

  • Tax-related information;

  • IP address and device information; and

  • Fraud-prevention and authentication information.

SSC does not receive or store your complete payment-card number. We may receive limited transaction information, such as the payment status, transaction amount, payment method, card type, expiration information, and the last four digits of the card.


The legal basis for processing payments is Article 6(1)(b) GDPR. Tax and accounting records are processed under Article 6(1)(c) GDPR. Fraud prevention and the establishment, exercise, or defense of legal claims may be based on Article 6(1)(f) GDPR.


Stripe may act as our processor for certain activities and as an independent controller for activities it determines itself, including regulatory compliance, fraud prevention, and payment-network obligations.


More information is available in Stripe’s Privacy Policy and Stripe’s Privacy Center.


9. Transactional and Membership Emails

We may send emails necessary to provide and administer your account, including:


  • Account-verification messages;

  • Password-reset messages;

  • Purchase and payment confirmations;

  • Trial and subscription information;

  • Renewal, cancellation, or failed-payment notices;

  • Material service or policy updates; and

  • Customer-support responses.

These communications are necessary to perform the membership contract and are based on Article 6(1)(b) GDPR or, where applicable, Article 6(1)(c) GDPR.


Operational emails may be sent through Uscreen or our email provider.


10. Marketing Communications

We send promotional emails only where you have consented or where applicable law otherwise permits us to contact existing customers.


Where marketing is based on consent, the legal basis is Article 6(1)(a) GDPR.


Where communication with an existing customer is legally permitted without separate consent, the legal basis is Article 6(1)(f) GDPR together with the applicable requirements of German unfair-competition law.


You may unsubscribe from marketing emails at any time by using the unsubscribe link in the email or contacting hello@saltedstrengthclub.com.


Unsubscribing from promotional emails does not prevent us from sending account, billing, security, or other service-related messages.


11. Cookies and Similar Technologies

Our website and membership platform use cookies and similar technologies.

Essential technologies

Essential cookies are used to:


  • Deliver website and platform functionality;

  • Maintain login sessions;

  • Remember account authentication;

  • Provide checkout and payment functionality;

  • Maintain video progress;

  • Support security and fraud prevention;

  • Determine country information required for tax purposes; and

  • Preserve user-requested settings.

These technologies are necessary to provide services expressly requested by the user and cannot always be disabled without preventing the website or membership platform from functioning.


Where personal data is processed through essential technologies, the legal basis is Article 6(1)(b) or Article 6(1)(f) GDPR. Access to or storage of information on a user’s device is based on Section 25(2) TDDDG where the technology is strictly necessary.


Uscreen uses essential server-side cookies for account access, sessions, checkout, viewing progress, tax-location information, and platform operation.

Nonessential technologies

Analytics, advertising, or other nonessential technologies will be used only after you have given the required consent.


Consent is based on Section 25(1) TDDDG and Article 6(1)(a) GDPR. You may withdraw consent at any time without affecting the lawfulness of processing that occurred before withdrawal.


12. Cookie Consent Management

We use CookieScript on our Showit website to:


  • Display the cookie banner;

  • Record consent choices;

  • Allow visitors to accept, reject, or customize nonessential technologies; and

  • Demonstrate that a consent choice was made.

CookieScript may process technical information such as the consent selection, consent identifier, date and time, browser information, and abbreviated or technical network information.


Processing necessary to document consent is based on Article 6(1)(c) and Article 6(1)(f) GDPR. Our legitimate interest is demonstrating compliance with privacy and cookie requirements.


You may change or withdraw your cookie preferences through the cookie settings control displayed on our website.


More information is available in CookieScript’s Privacy Policy.

The CookieScript settings on our public Showit website do not automatically control cookies on the separately hosted Uscreen membership platform.


13. Instagram Social Grid and Social-Media Links

Our Showit website may display recent content from the Salted Strength Club Instagram account using Showit’s Social Grid feature.


To provide this feature, Showit connects to our Instagram business or creator account and retrieves the public posts selected for display.


The legal basis for displaying SSC’s public social-media content is Article 6(1)(f) GDPR. Our legitimate interest is presenting current SSC content and allowing visitors to find our social-media profile.


If displaying the feed creates a direct connection between your browser and Meta or uses nonessential cookies or comparable technologies, it will be activated only after the required consent under Article 6(1)(a) GDPR and Section 25(1) TDDDG.


If you click an Instagram post or social-media link, you leave our website. Instagram and Meta may then process information about your visit under their own terms and privacy policies. We do not control Meta’s subsequent processing.


Instagram is provided by Meta Platforms Ireland Limited for users in the European Economic Area. More information is available in Meta’s Privacy Policy.


14. Service Providers and Other Recipients

Personal data may be disclosed to the following recipients where necessary:


  • Showit, for website hosting and delivery;

  • Uscreen, for membership accounts, checkout, video delivery, community features, and platform administration;

  • Stripe, for payments, tax-related checkout information, authentication, and fraud prevention;

  • Spacemail/Spaceship, for email hosting and communication;

  • CookieScript, for cookie-consent management;

  • Meta, in connection with Instagram features and links;

  • Hosting, content-delivery, security, and technical subcontractors used by these providers;

  • Professional advisers, including accountants, tax advisers, insurers, and legal advisers, where necessary;

  • Public authorities, courts, regulators, and tax authorities where disclosure is legally required; and

  • Other parties where necessary to establish, exercise, or defend legal claims.

We do not sell personal data.


15. International Data Transfers

Some service providers or their subprocessors are located outside Germany or the European Economic Area, particularly in the United States.


Where personal data is transferred to a country outside the European Economic Area, the transfer is based on an applicable European Commission adequacy decision or appropriate safeguards under Article 46 GDPR, such as the European Commission’s Standard Contractual Clauses, together with supplementary safeguards where required.


You may contact us for additional information about the safeguards relevant to a particular transfer.


16. Data Retention

We retain personal data only for as long as necessary for the relevant purpose or as required by law.


In particular:


  • Account and membership information is generally retained while the account or membership remains active.

  • If an Uscreen account is permanently deleted, identifying subscriber information is scheduled for deletion or anonymization through Uscreen’s account-deletion process, subject to legally required records.

  • Payment, invoice, tax, and accounting information is retained for the applicable statutory retention periods. Depending on the type of document, German law may require retention for six, eight, or ten years.

  • Customer-support and general correspondence is generally retained until the inquiry has been resolved and may then be retained for up to three years where necessary to establish, exercise, or defend legal claims.

  • Marketing information is retained until consent is withdrawn, an objection is made, or the information is no longer required. Limited suppression-list information may be retained to ensure that an unsubscribe request continues to be respected.

  • Cookie-consent records are retained for as long as reasonably necessary to demonstrate the consent choice and meet legal obligations.

  • Technical and security information is retained only for as long as required to maintain security, diagnose errors, prevent misuse, or establish legal claims.

Deletion may be suspended where information is required for legal proceedings, regulatory obligations, tax audits, or the defense of legal claims.


17. Your Data-Protection Rights

Subject to the applicable legal requirements, you have the right to:


  • Request access to your personal data under Article 15 GDPR;

  • Request correction of inaccurate or incomplete data under Article 16 GDPR;

  • Request deletion under Article 17 GDPR;

  • Request restriction of processing under Article 18 GDPR;

  • Receive eligible data in a portable format under Article 20 GDPR;

  • Object to processing based on legitimate interests under Article 21 GDPR;

  • Withdraw consent at any time under Article 7(3) GDPR; and

  • Lodge a complaint with a supervisory authority under Article 77 GDPR.

Where processing is based on consent, withdrawal does not affect the lawfulness of processing performed before the withdrawal.


You may exercise your rights by emailing hello@saltedstrengthclub.com. We may request information necessary to verify your identity.


We will respond without undue delay and generally within one month. This period may be extended by up to two additional months where permitted by the GDPR because of the complexity or number of requests. If an extension is necessary, we will notify you within the initial one-month period.


18. Right to Object

Where we process personal data on the basis of Article 6(1)(f) GDPR, you have the right to object to that processing for reasons arising from your particular situation.


Where personal data is processed for direct marketing, you may object at any time. If you object to direct marketing, your personal data will no longer be used for that purpose.


19. Right to Lodge a Complaint

You may lodge a complaint with a data-protection supervisory authority.

The supervisory authority responsible for private businesses established in Bavaria is:


Bavarian State Office for Data Protection Supervision

Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)

Promenade 18

91522 Ansbach

Germany


Website: www.lda.bayern.de


You may also contact another competent supervisory authority, particularly in the EU Member State of your habitual residence, place of work, or the place of the alleged infringement.


20. Automated Decision-Making

SSC does not make decisions about members based solely on automated processing that produce legal or similarly significant effects.


Payment providers may independently use automated fraud-prevention and authentication systems under their own legal responsibilities.


21. Data Security

We and our service providers use appropriate technical and organizational measures intended to protect personal data against accidental loss, misuse, unauthorized access, alteration, and disclosure.


These measures may include encrypted connections, access restrictions, authentication controls, backups, and security monitoring.


No online service can guarantee absolute security.


22. Children

SSC memberships and services are intended for adults aged 18 and older.


We do not knowingly offer memberships to or collect account information from children. If we become aware that an account belongs to a person under 18, we may close the account and delete the associated information, subject to applicable legal obligations.


23. Changes to This Privacy Policy

We may update this Privacy Policy when our services, providers, legal obligations, or data-processing practices change.


The current version will be published on this page with the date of the latest update. Where required, material changes will also be communicated through email or the membership platform.


24. Contact

For questions about this Privacy Policy or the processing of your personal data, contact:


Salted Strength Club

Email: hello@saltedstrengthclub.com