Privacy Policy

Most calculator inputs (weight, height, dates, currency amounts, loan figures, etc.) are processed entirely within your browser using client-side JavaScript. Some features use our server or a third-party API — for example, currency exchange rates and QR image downloads — and those requests include only the data needed for the feature (QR downloads include the QR text and any icon you chose), and we do not store them. We do not store calculator inputs or results on our servers, we do not require accounts and we do not sell personal data. Limited analytics and advertising are described in section 2 below.

Your browser may keep the following data on your own device:

• Session storage (current tab) — remembers your in-progress entries while you navigate or refresh in the same tab. It stays on your device and is normally cleared when you close the tab. It is not sent to us.
• Local storage (until you clear site data) — remembers preferences such as your theme and QR generator settings. It stays on your device until you clear it or use the Reset option. It is not sent to us, except for content you explicitly submit for a download.
• First-party cookies — support site access and remember your consent choice (see §2 below). They store access or preference values, not your calculator inputs.

We use Google Analytics to understand aggregated traffic patterns and improve the site. It is loaded with Google Consent Mode, which denies analytics and advertising storage by default. If you approve analytics, Google Analytics may set its standard analytics cookies and process pseudonymous identifiers (such as a client ID, approximate location, device/browser information and interaction events). Google Analytics does not store IP addresses. While consent is denied, Google may receive a cookieless ping used for modelled data.

We do not display third-party advertising today, but we may show ads in the future. If ads are shown, Google Ads or another ad provider may set advertising cookies and process personal data for ad personalisation, measurement and fraud prevention, subject to applicable consent requirements. Rejecting advertising denies optional advertising storage, ad user data and ad personalisation in our Google consent signals. Any ads served without consent must use a configuration that avoids optional tracking requiring consent; the label “non-personalised” alone does not mean cookie-free or consent-exempt. We do not guarantee that ads will be available when consent is declined.

Rejecting analytics denies Google analytics cookie storage. Google may still receive cookieless measurement pings, and cookieless traffic statistics continue. Cookie-free measurement can still involve processing technical or personal data. The banner lets you accept analytics and advertising, allow analytics only, or reject both. You can change your choice through “Cookie Settings” and remove existing cookies using your browser.

We also use cookieless, privacy-friendly analytics (currently Plausible and PostHog) for aggregated traffic measurement. These services are configured not to use cookies or local storage, not to create person profiles and not to record sessions. They process technical data such as IP addresses, browser information, page views and referrers to produce traffic statistics. Providers may use short-lived, rotating identifiers to count visits; this is not a guarantee that no personal data is processed. See the privacy information from Plausible and PostHog.

Analytics providers at a glance: Plausible Analytics (cookieless traffic statistics), PostHog (cookieless, no person profiles or session recording), and Google Analytics (Consent Mode, cookies only after you approve, no stored IP addresses). Some providers may process data outside your country — see section 3.

We do not use Facebook Pixel. Advertising cookies and identifiers are subject to the purposes and consent requirements described above, not blanket permission for new tracking.

Functional Cookies We Use

The following first-party cookies are used solely for site functionality. They are not used for advertising or cross-site tracking and are not shared with third parties for marketing.

• Access cookie — set only when you use the password-protected site. It remembers your access for a short period and is scoped to this site.
• Admin session cookie — set only for site administrators and scoped to the admin area. It is short-lived. It is never sent to other pages, and regular visitors never receive it. Access-controlled.
• Consent preference cookie — set when you make a choice in the cookie banner. It stores your analytics/advertising preference for about six months so the banner is not shown again. It stores the selected categories, not your name or calculator inputs. You can change or withdraw your choice at any time via “Cookie Settings”.

The site may also use session or local storage for tool data and preferences (see §1), and Google Analytics cookies only if you approve analytics in the cookie banner. Google Analytics may then process pseudonymous identifiers and usage data, and it does not store IP addresses. We do not use advertising cookies today. If ads are shown, advertising cookies are used only where you have approved advertising in the cookie banner, and you can change that choice at any time.

Legal bases (where GDPR or similar laws apply)

• Consent — optional Google analytics cookie storage and advertising storage or personalisation where required. You can withdraw consent using “Cookie Settings”, and you can choose analytics only, analytics and ads, or reject both.
• Legitimate interests — cookieless, aggregated traffic measurement, site access, preferences, security and abuse prevention, where permitted by applicable law. A cookieless configuration does not itself remove any applicable consent requirement. Analytics is used for traffic trends rather than to learn your name or connect your calculations to a person.
• Legal obligation — where we must keep or disclose information to comply with the law.

Recipients and service providers

Plausible Analytics, PostHog, Google (Google Analytics and Google advertising products), exchangerate-api.com (currency rates), and our hosting provider. We do not sell personal data for money. Advertising disclosures can constitute “sharing” or a “sale” under some privacy laws even without payment. Where ads are shown, Google may act as an independent controller under its own terms; advertising is personalised only with your consent. See how Google uses data from partner sites.

International transfers

Providers may process data outside your country, including in the EU and United States. The applicable safeguards depend on the recipient, destination and service agreement; where required, transfers need an adequacy decision or appropriate contractual or other lawful safeguards. The linked provider privacy information describes their processing locations and transfer arrangements. Contact us to request information about the safeguards applicable to your data or how to obtain a copy.

Retention

• Calculator inputs and QR content: not retained by us on our servers.
• Authentication cookies: short-lived (typically hours to a couple of days). Consent preference: about six months.
• Analytics: retention depends on whether records are event-level or aggregated, the measurement purpose, and provider settings. Identifiers and event records are subject to provider deletion or rotation rules; aggregated reports may be retained longer for traffic comparisons. Provider privacy information describes these rules, and you can contact us for the settings applicable to this site.
• Cookieless analytics: aggregated statistics; any rotating identifiers are short-lived.
• Server logs: retention depends on the host's log rotation and backup settings and on security investigations, troubleshooting and legal preservation needs. Contact us for the applicable hosting retention details.
• Emails: retention depends on resolving the enquiry, related disputes and applicable legal requirements.

Spantally runs on a hosted web server that renders pages and supports features such as exchange-rate caching and site administration. Calculator inputs are processed in your browser and are not stored server-side by the application.

The site uses a server-side database for operational purposes — it stores site settings, cached exchange rates for the currency converter, and admin authentication data. It does not contain visitor calculator inputs and is not used for advertising profiles.

Our hosting provider may collect standard server access logs such as IP address, user agent, request timestamp and requested URL for security, diagnostics, bandwidth monitoring and abuse prevention. IP addresses and similar log data can constitute personal data under some laws. Such logs are not used by us for marketing or behavioural profiling and are retained according to the hosting provider's policies.

Privacy laws differ around the world. We keep collection minimal, but analytics, server logs and advertising may involve personal data. Where the GDPR, UK GDPR or similar laws apply, you have the following rights, subject to legal exceptions:

• Right of access — You can ask what personal data we or our providers process about you. Much analytics data is aggregated or pseudonymous, so we may not be able to identify you individually.
• Right to rectification — You can ask us to correct inaccurate personal data we control.
• Right to erasure — You can clear cookies and local storage via your browser, withdraw consent via “Cookie Settings”, or contact us to request deletion of data we control.
• Right to data portability — Where we process personal data you provided on the basis of consent or contract, you can request a copy in a portable format where technically feasible.
• Right to object or restrict processing — You can object to or request restriction of certain processing, including analytics, by changing your cookie choices or contacting us.
• Right to withdraw consent — You can withdraw analytics or advertising consent at any time. Withdrawal does not affect processing that occurred before withdrawal.
• Right to complain — You may lodge a complaint with your local data protection authority. If you are in Ireland, this is the Data Protection Commission (dataprotection.ie).

Depending on where you live, you may also have rights under other laws — for example, in California, the right to know, delete, correct, and opt out of the “sale” or “sharing” of personal information, and the right not to be discriminated against for exercising your rights, where these laws apply. We do not sell personal data for money. You can reject optional advertising storage and personalisation via “Cookie Settings” and contact us about other applicable sale, sharing or targeted-advertising opt-outs.

If you have questions about your privacy rights or how Spantally handles data, contact us at the email address below.

Data controller: the operator of Spantally, contactable at the email address below. This policy applies to visitors worldwide.

If you have questions about this privacy policy or wish to exercise any of your data protection rights, you can reach us at:

This privacy policy may be updated from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. The "Last updated" date at the top of this page indicates when the most recent changes were made. Any materially different processing remains subject to applicable notice and consent requirements; using the site is not consent to optional tracking.