← Back to Sparblick
DE EN

Privacy Policy

Applies to the Sparblick app (Android, desktop and web/PWA) and to this website. Last updated: August 2026

The essentials in one sentence: everything you enter into Sparblick stays locally on your device only – we do not collect, store or transmit any of your financial data. Simply visiting this website does, as with every website, involve technically necessary connection data; see “This website” below.

1. Controller

The controller within the meaning of the GDPR is Oleksandr Levchenko, sole trader; the full postal address is given in the legal notice.
You can reach us by email at info@sparblick.app.

2. The app: what data is processed

Everything you enter into Sparblick (income, expenses, savings, categories, people) is stored locally only on your device – in the storage of the app or of your browser (localStorage). There is:

The installed app additionally keeps a backup copy of your data in its private directory on the same device, so nothing is lost if the operating system clears the app's cache. That copy never leaves the device and is removed when you uninstall the app.

Backing up and transferring your data is done exclusively by you, via the JSON export/import. Imported bank transaction lists (CSV, XML or PDF) are likewise processed entirely on your device and are not transmitted anywhere.

3. The app: no connections while you use it

While in use, the app does not connect to any server – neither ours nor a third party's. There is no update check and nothing is fetched at runtime: no fonts, no maps, no scripts. The typeface ships with the app; no external font services (such as Google Fonts) are embedded. Your financial data is never transmitted.

One difference applies to the web version at sparblick.app/app/ only: for it to start in your browser, its program files (HTML, script, stylesheet, icons, typeface) are downloaded from the server once. That download produces the same connection data as any other page of this website (see section 5). Your browser then stores those files locally (“service worker”), so the app also works offline. Only the program files are transferred – never your entries.

4. Permissions (Android)

The app requests no special permissions. File access during export/import runs through Android's own system dialogs – you pick the file yourself each time.

5. This website: hosting and delivery

This website is hosted on GitHub Pages (GitHub, Inc., 88 Colin P. Kelly Jr. Street, San Francisco, CA 94107, USA) and delivered through the content delivery and security network of Cloudflare (Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA). Both act as processors on our behalf.

On every request, these services automatically process the technically necessary connection data your browser transmits:

This processing is necessary to deliver the page at all, to keep it running reliably and to fend off automated attacks. The legal basis is our legitimate interest in a secure and functioning service under Art. 6(1)(f) GDPR. These log entries are not combined with any other data source.

Both providers also process data on servers in the USA. They are certified under the EU-US Data Privacy Framework; in addition, the European Commission's standard contractual clauses apply. For details, see the privacy notices of GitHub and Cloudflare.

6. This website: traffic measurement

To understand whether and how this page is found, we use Cloudflare Web Analytics – a deliberately data-minimising alternative to the widespread analytics services. Specifically:

The legal basis is our legitimate interest in a statistical evaluation of our reach under Art. 6(1)(f) GDPR. Because this requires neither storing information on your device nor reading it from there, no consent under § 25 TDDDG (the German implementation of the ePrivacy rules) is required – which is also why you see no cookie banner here. You can prevent the measurement at any time by using a content blocker or disabling scripts for this site; the website will work exactly the same.

To be clear: this measurement concerns visits to the website only. The financial data you enter in the app is never captured by it – that data does not leave your device.

7. Cookies

This website sets no cookies. The web app at sparblick.app/app/ stores your entries as well as settings such as language and colour theme in your browser's local storage (localStorage). That is strictly necessary for the app to work, happens exclusively on your device, and does not serve recognition or analysis. You can delete this data at any time through your browser settings or in the app under Data → Reset.

8. App stores

When you obtain the app through Google Play, Google processes its own data (installation statistics, for example) under its own responsibility – see the Google privacy policy.

9. Contacting us

If you write to us by email, we process your details solely in order to handle your enquiry. The legal basis is Art. 6(1)(f) GDPR (our legitimate interest in responding) or Art. 6(1)(b) GDPR where your enquiry is aimed at entering into a contract. Messages are deleted once they are no longer needed and no statutory retention obligations apply.

10. Retention

The server logs described in section 5 are retained by the providers only briefly, to defend against attacks and to diagnose faults, and are deleted automatically thereafter. The aggregated statistics described in section 6 do not allow any identification of individuals and are retained for a maximum of six months.

11. Your rights

Under the GDPR you have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and a right to object to processing based on legitimate interests (Art. 21). Simply contact us at the email address given above.

Please note: for the contents of your app we cannot fulfil these rights at all, because we hold nothing to act on – all of that data sits with you alone. You can delete it yourself at any time: in the app (Data → Reset) or by uninstalling.

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), for instance the Hessian Commissioner for Data Protection and Freedom of Information.

12. Changes to this policy

We update this privacy policy when the features of the app or the website change, or when legal requirements do. The version published here is the one that applies; the date is shown above under “Last updated”.

This is a translation for your convenience. In case of doubt, the German version prevails.