Privacy policy
1. Who is responsible
Mohamad AmerEmail: mohamad.amerrr@icloud.com
2. The short version
- There are no ads, no tracking and no analytics tools.
- Fonts and code libraries are delivered by this website itself. No Google services and no external script providers are used.
- Your entries in the Budget Tracker (expenses, income, fixed costs, settings) stay in your browser's storage on your device. I have no access to them.
- Personal data mainly arises when pages are loaded (hosting), when you pay (Stripe) and when you email me.
3. Hosting and server logs (Cloudflare)
The websites are hosted by Cloudflare (Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA; for customers in the EEA also through Cloudflare Germany GmbH). When you open a page, Cloudflare processes technically necessary connection data, in particular your IP address, date and time, the requested address, and browser and device information. This keeps the websites running, secure and stable (protection against attacks).
The legal basis is Art. 6(1)(f) GDPR (legitimate interest in secure and efficient operation). A transfer to the USA may take place. It relies on the adequacy decision for the EU-US Data Privacy Framework where the provider is certified, and otherwise on EU standard contractual clauses. A data processing agreement is in place with Cloudflare.
4. The Budget Tracker: storage in your browser
The Budget Tracker runs entirely in your browser. It saves your entries and settings in your browser's local storage (localStorage). This data is not sent to me or to any server. It is needed for the application to work (Art. 6(1)(b) GDPR, § 25(2) no. 2 TDDDG).
| What | Why |
|---|---|
| Entries, income, fixed costs, categories, payment methods, tracker name and color theme | Display and calculation inside the application |
| Chosen language and appearance (light/dark) | So the page looks the same on your next visit |
You can delete this data at any time yourself, in the tracker under Menu, "Reset all data", or by clearing the site data in your browser. Note that if you clear browser data, your entries are gone for good. The tracker can create a PDF report. It is created in your browser and not uploaded.
5. Payment (Stripe)
If you buy the Budget Tracker, the payment is processed by Stripe. For customers in the EEA the provider is Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, D02 H210, Ireland (affiliated with Stripe, Inc., USA). On Stripe's payment page you enter, depending on the payment method, your name, email address, payment details and possibly a billing address. This data goes directly to Stripe. I do not receive card details.
From Stripe I receive confirmation of the payment as well as your email address, the amount and the time. The legal basis is Art. 6(1)(b) GDPR (performance of the contract). Stripe processes some data under its own responsibility, for example for fraud prevention and legal obligations. See Stripe's privacy policy for details: stripe.com/privacy. Transfers to third countries, in particular the USA, rely on adequacy decisions or standard contractual clauses.
6. Access cookie after purchase
After a successful payment I set a cookie named bt_license. It contains only a signed identifier (no name, no email address) so the tracker can tell that you have paid. It is required to provide the service you bought (Art. 6(1)(b) GDPR, § 25(2) no. 2 TDDDG) and is kept for one year. No cookies are set for advertising or analytics.
7. Restoring access
When you restore access on a new device, you enter the email address you paid with. It is sent to Stripe for the duration of the request to check the payment, and it is not stored by me (Art. 6(1)(b) GDPR).
8. Contact by email and the Instagram link
If you write to me, I process your details to answer your request (Art. 6(1)(b) or (f) GDPR). I delete them once the matter is closed, unless legal retention duties require otherwise.
The websites link to my Instagram profile. No Instagram content is embedded. Only when you click the link is data sent to Instagram (Meta), and Instagram's privacy terms apply.
9. How long data is kept
Cloudflare keeps connection data only for a short time under its own policies. I keep payment and invoice records for as long as commercial and tax law require (currently up to ten years). After that they are deleted.
10. Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21). Just email me at the address above.
You can also complain to a data protection supervisory authority. The authority responsible for my place of residence is the State Commissioner for Data Protection and Freedom of Information of Rhineland-Palatinate (Landesbeauftragter für den Datenschutz und die Informationsfreiheit Rheinland-Pfalz), Hintere Bleiche 34, 55116 Mainz, www.datenschutz.rlp.de.
11. Security and changes
The websites are delivered encrypted (HTTPS). There is no automated decision-making or profiling. I will update this policy when the websites or the law change. The version published here applies.