How Bored Panda Group handles personal data in connection with this website and when you contact us — and how you can exercise your rights over your own data.
Last updated 1 September 2026
This Privacy Policy explains how Bored Panda Group handles personal data in connection with this website (the “Website”) and when you contact us. We keep this simple: the Website has no user accounts, no forms, no advertising and no analytics or tracking cookies.
The data controller is UAB Bored Panda Group, a company registered in the Republic of Lithuania, company code 307694651, registered address Polocko g. 17-113, LT-01205 Vilnius, Lithuania (“we”, “us”).
Bored Panda Group is the parent company of these group companies: UAB Pandos (boredpanda.com), UAB Bored Panda Studios, UAB Spike and UAB Gildium (the “Group Companies”).
For any privacy question, email group@boredpanda.com with the subject line “My privacy”.
The Website lists email addresses for general enquiries, press, partnerships, editorial, studio and distribution questions. When you write to one of them, we process your name, email address, any company or job title you share, the content of your message and any attachments.
Several of these mailboxes are handled by the Group Company your enquiry relates to. For example, editorial@ is handled by UAB Pandos, studios@ by UAB Bored Panda Studios and spike@ by UAB Spike. If your message concerns a Group Company, we may forward it to that company, and it will handle your data as a separate controller under its own privacy policy.
Open positions are published at jobs.boredpanda.com, which runs on the Teamtailor recruitment platform. Applications submitted there are covered by the candidate privacy notice shown on the jobs board. That notice names the company that processes your application.
If you send us your CV or an open application by email, we process the information you provide, such as your name, contact details, CV, cover letter, work history, education and portfolio.
Please do not send us sensitive information, such as health data or ID documents, unless we specifically ask for it.
The Website is hosted on Firebase Hosting, a service provided by Google LLC (USA), and on GitHub Pages, a service provided by GitHub, Inc. (USA). When you visit the Website, the hosting provider automatically processes technical data, including your IP address, browser type and the time of your request, to deliver the pages and keep the service secure. It may keep this data in server logs for a limited period. Our legal basis is our legitimate interest in operating a secure website (Art. 6(1)(f) GDPR).
Map on the Contacts page. The Contacts page shows where our offices are on a map from OpenStreetMap. To display it, your browser loads the map images directly from servers of the OpenStreetMap Foundation (United Kingdom), which receive your IP address and browser information. The OpenStreetMap Foundation processes this data under its own privacy policy. Our legal basis is our legitimate interest in showing you where to find us (Art. 6(1)(f) GDPR).
The Website links to our profiles and to other Group websites, including Instagram, LinkedIn, Facebook, TikTok, Pinterest, Reddit, YouTube, boredpanda.com and our jobs board. Once you follow a link, the operator of that site controls how your data is processed, under its own privacy policy. We encourage you to read those policies.
We do not sell your personal data. We share it only when necessary with:
Transfers outside the EEA. Some of our service providers are based in the USA. Where personal data is transferred outside the European Economic Area, we rely on an adequacy decision, such as the EU–US Data Privacy Framework, or on the European Commission’s Standard Contractual Clauses.
Under the GDPR you have the right to:
To use any of these rights, email group@boredpanda.com with the subject line “My privacy”. We may ask you to confirm your identity. We will reply within one (1) month of receiving your request. We may extend this by up to two (2) further months where needed, taking into account how complex your request is and how many requests we have, and we will let you know if we do.
If you believe we are processing your data unlawfully, you can complain to the State Data Protection Inspectorate of Lithuania (Valstybinė duomenų apsaugos inspekcija), L. Sapiegos g. 17, LT-10312 Vilnius, vdai.lrv.lt. You can also complain to the data protection authority in the EU country where you live. We would appreciate the chance to resolve your concern first.
We may update this Policy from time to time, for example if we add new features to the Website. The date at the top shows when it was last updated.