Privacy policy
The information below reflects the known technical design but is not a complete data protection notice. Fill in the controller's real identity, the specific processors and recipients, purposes and legal bases, retention periods, cross-border transfers, and rights. Ensure the German and English texts accurately describe the live deployment.
1. Data controller
[Full legal name or entity, valid postal address, public contact email; data protection officer if required]
2. Hosting and website access
The Finplanr app is provided through a Cloudflare Tunnel, with website traffic proxied through Cloudflare. When the website is visited, technical data such as IP address, request time, URL and browser information may be processed for website delivery and security. [Specify actual service providers, recipients, purposes, legal bases, access logs and deletion schedules, and international transfer safeguards.]
3. Browser-based portfolio settings
Finplanr generally saves user-entered portfolio data and preferences in the web browser's local storage. The current app has no central portfolio database. Information is specific to the browser and device and may be lost when site data is cleared. [Assess the legal basis, necessity and controls for this storage.]
4. External instrument data and images
When online search or external asset images are used, the browser may contact third parties, potentially sharing network identifiers and search terms. [Identify actual vendors, such as CoinGecko and Wikidata/Wikimedia if used, external image sources, data transmitted, legal basis, and whether prior consent is required for specific requests.]
5. Advertising and consent
[Only once AdSense has been implemented:] Describe the actual advertising services, personal data processed, cookies or similar technologies, purposes, legal bases, recipients, international transfers and consent management. Configure an appropriate certified consent management platform where required.
6. Your rights
Depending on the applicable GDPR conditions, you may have rights of access, rectification, erasure, restriction, portability and objection, and the right to withdraw consent. You can complain to a competent data-protection supervisory authority. [Add accurate contact and authority information.]
7. Updates
Last reviewed: [date after legal and technical verification]
The German privacy notice is also available. Both language versions should remain consistent and up to date.