Privacy policy
1. Who is responsible
Mohamad Amer
Email: mohamad.amerrr@icloud.com
2. The short version
There is no account, no ads, no tracking and no analytics tools. Fonts and code are delivered by this website itself. No Google services and no external script providers are used. The data of your flat (names, expenses, amounts) is encrypted on your device before it leaves the app. The key is only in the invite link and is never sent to me, so I cannot read the contents. Personal data mainly arises when pages are loaded (hosting) and when you email me.
3. Hosting and server logs (Cloudflare)
The website is hosted by Cloudflare (Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA; for customers in the EEA also through Cloudflare Germany GmbH). When you open a page, Cloudflare processes technically necessary connection data, in particular your IP address, date and time, the requested address, and browser and device information. This keeps the website running, secure and stable (protection against attacks, limiting too many requests). The legal basis is Art. 6(1)(f) GDPR (legitimate interest in secure and efficient operation). A transfer to the USA may take place. It relies on the adequacy decision for the EU-US Data Privacy Framework where the provider is certified, and otherwise on EU standard contractual clauses. A data processing agreement is in place with Cloudflare.
I also keep plain daily counters on the server, for example how many flats were created that day. They contain no IP address, no cookie value and no other identifier, so they cannot be linked to a person. They help me see whether the service is used and working (Art. 6(1)(f) GDPR).
4. WG Split: storage in your browser
WG Split runs in your browser and saves the following in its local storage (localStorage). It is needed for the app to work (Art. 6(1)(b) GDPR, § 25(2) no. 2 TDDDG). No cookies are set.
| What | Why |
|---|---|
| The flats you use, their invite link including the key, a local copy of the entries and who you are in the flat | Display and calculation inside the app |
| Chosen language and whether the short tutorial is hidden | So the app looks the same on your next visit |
You can delete this data at any time yourself, in the app under Menu, "Remove flat from this device", or by clearing the site data in your browser.
5. The shared flat: an encrypted copy on the server
So that all flatmates see the same data, an encrypted copy of the flat is stored on my server. Your device encrypts the data (names, expenses, amounts, descriptions) before it leaves the device. The key is only in the invite link (after the # sign) and is never sent to me, so I cannot read the contents.
What is stored on the server: a random flat identifier, the encrypted copy, a version counter and the time of creation and of the last change. The data is stored in a Cloudflare D1 database in Western Europe. Cloudflare also processes your IP address when your device connects, as described in section 3. The legal basis is Art. 6(1)(b) GDPR (providing the function you chose).
Anyone with the invite link can read and change the flat. Share it only with your flatmates. If you lose the link, I cannot recover the data. You can delete the flat at any time in the app under Menu, "Delete flat for everyone", or ask me by email. A flat that has not been changed for a year is deleted automatically.
6. Sharing via WhatsApp
If you choose "Share on WhatsApp" in the app, your device opens WhatsApp with a prepared text. From then on WhatsApp's terms apply. I receive no data from this.
7. Contact by email
If you write to me, I process your email address and the content of your message to reply (Art. 6(1)(f) GDPR). I delete the message when the matter is closed and no legal duty requires otherwise.
8. Your rights
You have the right of access, rectification, erasure, restriction of processing, data portability and objection (Art. 15 to 21 GDPR). Write to me by email. You can also complain to a data protection authority, for example the State Commissioner for Data Protection and Freedom of Information of Rhineland-Palatinate.
9. Changes
If the features change, I will update this policy. The version published at the time of your visit applies.