Legal notice

Information pursuant to § 5 DDG (German Digital Services Act)

Elmar Neugebauer
Auf der Panne 34
44805 Bochum
Germany

Contact

Responsible for the content

Elmar Neugebauer, address as above.

Liability for content

As a service provider I am responsible for my own content on these pages under general law, pursuant to § 7 (1) DDG. The entries inside a shared purse are made by its users; under §§ 8 to 10 DDG I am not obliged to monitor stored third-party information.

Privacy policy

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is Elmar Neugebauer, Auf der Panne 34, 44805 Bochum, Germany, email kontakt@famquota.com.

2. Hosting and server log files

This application runs on web space operated in Germany. When a page is requested, the server necessarily processes the IP address, the date and time, the file requested and the information sent by the browser. This data is required for operation and security (Art. 6 (1) (f) GDPR) and is not combined with any other data.

These log files are kept by the hosting provider, not by the app. They lie outside the area this project can reach; they are neither read nor evaluated here and are not linked to any shared purse. A data processing agreement pursuant to Art. 28 GDPR is in place with the hosting provider.

3. What the app stores

Everything a group enters is kept in its own file, reachable only through its access code and password. Other shared purses see none of it. In detail:

About the purse: name, access code, period, categories, weightings, currencies and a log of changes.
About each family: the freely chosen name — a pseudonym is enough, a real name is not required —, the number of people, their own arrival and departure dates and, in closed mode, a password. Passwords are stored only as a cryptographic hash and are visible to nobody, including me.
Optional payment details: IBAN, account holder's name, or a payment service handle or mobile number. These serve only to make settling up easier. They are voluntary and can be removed again at any time with one click.
About each expense: amount, date, category, description, who paid and who shares it — plus a receipt photo if you want one.
Lists: shopping, tasks and suggestions, together with the family they are assigned to.

The legal basis is Art. 6 (1) (b) GDPR — without this information a shared purse cannot be kept.

4. Cookies and local storage

The app sets no cookie for advertising or analytics. It uses only:

a session cookie (urlaubskasse) that carries the sign-in. Without the "stay signed in" tick it ends when the browser closes; with it, after 60 days;
a language cookie (urlaubskasse_lang) if a language was chosen by hand;
one entry in the browser's local storage for the chosen font size. It never leaves the device.

5. No sharing, no tracking

There is no transfer to third parties, no advertising, no analytics tools, no external fonts or scripts and no transfer to third countries. The app loads nothing from other servers.

6. Retention and automatic deletion

A shared purse in which nothing happens for 183 days is deleted automatically and completely, together with all entries and receipt photos (Art. 5 (1) (e) GDPR). Every visit resets the deadline. From 30 days before deletion a notice appears in the app; the remaining time is always shown under "More" → Settings.

7. Your rights

You have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21 GDPR). For the most important of these you do not have to ask anyone — they are built into the app:

Access and portability: under "More" you will find the complete settlement as a spreadsheet (CSV) and all receipt photos as a ZIP archive.
Rectification: every entry can be edited.
Erasure: payment details can be removed individually. A family can delete its personal data ("anonymise"): name, payment details, travel dates and password disappear, while the amounts remain as an anonymous item — otherwise the others' settlement would no longer add up. The entire purse can be deleted without residue under "More" → Settings.

Beyond that, an informal email to kontakt@famquota.com is enough. You also have the right to lodge a complaint with a supervisory authority; the one responsible for me is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia.

8. Children

The app is aimed at groups sharing costs. Children appear in it only as a number; names of children are not provided for and should not be entered.

9. Security

Transmission is encrypted (HTTPS). Passwords exist only as hashes. Repeated failed sign-in attempts are temporarily blocked. The access code of a purse does not reveal whether it exists: the sign-in page answers an invented code exactly as it answers a real one.