Privacy Policy

Spantally processes no personal data on our servers. All calculator inputs (weight, height, dates, currency amounts, loan figures, etc.) are processed entirely within your browser using client-side JavaScript. This data never leaves your device.

Spantally stores data exclusively on your device using two browser-native mechanisms:

• sessionStorage — a local, temporary storage mechanism built into every modern browser. This allows the site to remember your form inputs during a single browsing session for convenience (e.g., so you don't lose your entries when navigating between pages). This data is stored only on your device, never transmitted to any server, and automatically cleared when you close your tab.
• Functional first-party cookies — tiny pieces of data stored by your browser that enable basic site features such as password-protected access (see §2 below). These cookies contain no personal information and exist solely to make the site work correctly.

We use Google Analytics 4 (GA4) to understand aggregated traffic patterns and improve the site. GA4 is configured for privacy (IP anonymisation is on by default in GA4) and does not collect personally identifiable information on Spantally's behalf. We use Google Consent Mode v2, which sets analytics_storage, ad_storage, ad_user_data, and ad_personalization to denied by default — no cookies are set and no personal data is collected until you grant the corresponding consent via the cookie banner. While you decide, Google receives a cookieless ping (no client ID, no cookies) used only for aggregated modelled data — this is the standard Consent Mode v2 behaviour used by the majority of EU sites. If you grant advertising consent, Google Ads (such as AdSense) may collect personal data for ad personalisation; if you do not, no advertising cookies are set.

• Facebook Pixel or social-media trackers
• Fingerprinting or any other user-identification techniques

Functional Cookies We Use

The following first-party cookies are used solely for site functionality. None of them track your behaviour, collect personal data, or share information with third parties.

• site_unlock — Set only when you enter the site password on the login page. It remembers your authentication for up to 48 hours so you don't have to re-enter the password on every page. httpOnly, SameSite=Strict, path=/.
• admin_session — Set only when an site administrator logs into the admin panel. It is scoped to the /admin path, lasts 4 hours, and is never sent to other pages. Regular visitors never receive this cookie. httpOnly, SameSite=Strict, path=/admin.
• cookie_consent — Set when you make a choice on the cookie-consent banner. It stores your granular preference (all, analytics, or rejected) for 182 days (approximately 6 months) so the banner is not shown again on subsequent visits. Contains no personal information. SameSite=Lax, path=/.

In addition to these cookies, the site may use sessionStorage for temporary in-session data (see §1) and Google Analytics 4 (GA4) cookies (_ga, _ga_<container-id>) if you have consented via the cookie banner — GA4 is privacy-tuned with IP anonymisation on by default and does not collect personally identifiable information.

Spantally is a static website — meaning all pages are pre-built HTML, CSS, and JavaScript files served directly to your browser. There is no application server processing user input and no server-side logging of your activity.

Spantally uses a server-side SQLite database for purely operational purposes — it stores site configuration settings (e.g., the Google Analytics measurement ID), cached exchange rates for the currency converter, and admin authentication data. This database contains no personal user data and no calculator inputs (those are processed entirely in your browser). The database exists solely to support site features and is never used for tracking, profiling, or data collection.

Our hosting provider may collect standard, anonymized server access logs (IP address, request timestamp, pages visited) for operational purposes such as bandwidth monitoring and abuse prevention. These logs are not linked to any individual and contain no personal data beyond what every web server normally records.

The General Data Protection Regulation (GDPR) is the European Union's comprehensive data privacy law. Since Spantally does not collect or process any personal data, your GDPR rights are inherently respected. Specifically:

• Right of access — There is no personal data held about you, so there is nothing to provide.
• Right to rectification — No personal data exists to correct.
• Right to erasure — The only data stored is in your browser's sessionStorage and functional cookies; closing your tab clears sessionStorage, and you can delete all cookies via your browser settings at any time.
• Right to data portability — Not applicable, as we hold no personal data.
• Right to object — There is no processing to object to.

If you have any questions about your privacy rights or how Spantally handles data, please contact us at the email address below.

If you have questions about this privacy policy or wish to exercise any of your data protection rights, you can reach us at:

This privacy policy may be updated from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. The "Last updated" date at the top of this page indicates when the most recent changes were made.