Legal
Privacy
Controller and scope
Tabspaces e.U. · Christoph Tobias Stenglein, BSc. · Thalmannsbach 15, 4771 Sigharting, Österreich
This notice covers hamsterbudget.com, the HamsterBudget app for iPhone and iPad, optional device sync, enquiries and desktop license provision. The sync information applies if you use sync. Visiting this website does not upload your budget files. Updated: 16 October 2026.
Website delivery and server logs
The website, sync server and license server are hosted by Hetzner in Germany.
The server infrastructure processes connection data needed to deliver the website, including your IP address, request time, requested address and browser information. Access data may be processed in server logs to investigate errors and prevent misuse. The legal basis is Article 6(1)(f) GDPR: our legitimate interest in secure, reliable operation.
Server logs for the website, sync server and license server are retained for 30 days and then deleted. Fonts and product images are served by this website.
iPhone and iPad app
The iOS app stores budget files and settings on your device or in a location you choose through the system Files picker. Local budgets without device sync are not transferred off the device by HamsterBudget. External storage locations you choose are subject to that service's terms. The app and sync have no telemetry, usage analytics or tracking; separate website analytics information appears below.
The free 30-day trial and permanent unlock use Apple's in-app purchases. Apple processes payment and purchase data under its own privacy policy. The app checks these purchases on the device; trial and full-version receipts are not sent to our server. For an Apple sync subscription, however, the Apple-signed purchase receipt is sent to our server and stored there for verification and access, as described below.
Optional device sync
Sync is optional and requires an account at sync.hamsterbudget.com. You sign in with an email address and password or a magic link. We process your email address and the authentication and session data required for sign-in and account security. With sync enabled, the contents of synchronized budgets, including budget names, accounts, transactions and other financial information you enter, are transferred to the server and stored in association with your account. The purpose is to provide your account and synchronize budgets between your devices. The legal basis is Article 6(1)(b) GDPR.
Transfers use TLS. Synchronized budgets are not end-to-end encrypted; the server can process their contents. Budgets for which you do not enable sync are not sent to the sync server. Sync data is not used for telemetry, tracking or advertising.
Sync is a separate subscription. For web purchases through Stripe Managed Payments, Stripe is the merchant of record and handles the sale and payment. Stripe processes the necessary contact, billing and payment information as an independent controller. Our server processes customer, subscription and transaction identifiers associated with your account, the subscription period and payment status to verify sync access; payment details such as card numbers are not stored on our server.
For in-app sync subscriptions, Apple processes payment as an independent controller. Our server receives and stores the Apple-signed purchase receipt and information about the transaction ID, product, expiry, refunds and renewal status to verify and maintain access. We do not receive payment details from Apple. Subscription data is processed to perform the contract under Article 6(1)(b) GDPR and, where statutory retention obligations apply, under Article 6(1)(c) GDPR.
The hosting provider named above processes account and sync data as a processor to operate the server. We use Resend as a processor to deliver account, verification and magic-link emails, as well as desktop licenses. Resend receives the recipient address and email contents; budget contents are not sent as part of these emails. Stripe and Apple receive the purchase and account-association data necessary for their respective purchase channels, but no synchronized budget contents.
Resend, Stripe and Apple may process data outside the EEA, including in the USA. Information about their processing and international data transfers is available in the providers' privacy notices linked below.
Account and current budget data is stored for the lifetime of the sync account. Ending a subscription or disabling sync does not automatically delete the account or server-side budgets. Technical change histories have limited retention; the default configuration provides for 365 days. Server logs follow the period stated above. Subscription and purchase data is processed for as long as entitlement checks, purchase administration or statutory retention obligations require.
You can delete your account at sync.hamsterbudget.com/account. This deletes the account and its associated sync budgets from the server. A Stripe sync subscription ends immediately on account deletion. Account deletion does not cancel an Apple sync subscription; you must cancel it yourself in iPhone Settings under your Apple Account and “Subscriptions” to prevent further renewals. Local budget files remain under your control. Purchase data subject to statutory retention, backups and logs may have separate retention and deletion periods. Desktop purchases are retained after account deletion; their association with the account is removed.
Google Analytics – with consent only
With your consent, we use Google Analytics 4, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, to understand and improve website usage. Without consent, Analytics does not load and this website sends no analytics requests to Google. The legal basis is Article 6(1)(a) GDPR.
After consent, Google receives usage and device information, cookie identifiers, page views and clicks on purchase or download offers. Our events include language, platform and, where applicable, billing interval. Configured page addresses exclude query parameters and fragments; the referring address is not sent. Clicking a purchase button does not confirm a purchase.
Google receives the IP address as part of the connection. For EU, Swiss and UK traffic, Google states that it discards it after geographical lookup before logging. Data may also be processed outside the EEA, including in the USA. Google's privacy information explains recipients and the grounds it uses for international transfers.
The website disables advertising personalisation and Google Signals in its tag configuration. Analytics cookies (_ga and _ga_6QVPSSMQ09) have a configured lifetime of up to 180 days. Google's storage of analytics data is separate and follows the Analytics property's retention settings.
Local preferences and withdrawing consent
Your consent or refusal is stored as hamsterbudget-consent-v1 in browser local storage for six calendar months. A manual language choice is stored for the browser session. This storage implements your preferences.
You can withdraw consent at any time using “Privacy settings”. The website removes its Analytics cookies and reloads to stop further measurement. Withdrawal does not affect processing already carried out. You can also delete local preferences in your browser.
Purchase and desktop license
The purchase button opens an external Stripe Managed Payments checkout; Stripe is the merchant of record. The checkout processes the contact, payment and billing information needed for your purchase under its own privacy information. You do not enter payment details on this website. Resend delivers the license email; recipients and retention are described in the sync section.
To provide your desktop license, we process your purchase email address, transaction identifiers, payment status and license data. Activation processes an installation identifier, device name and operating system. This supports license delivery, entitlement checks and device management under Article 6(1)(b) GDPR. License data is retained for provision and management of your license, subject to statutory retention requirements.
Email enquiries
We process your email address and message to answer enquiries and provide support. We use Google Workspace (Google Ireland Limited) for email. The legal basis is Article 6(1)(b) GDPR for contractual enquiries, or our legitimate interest in answering other enquiries under Article 6(1)(f) GDPR. Messages are retained for as long as handling the enquiry and any legal obligations require.
Your rights
Subject to the GDPR, you have rights of access, rectification, erasure, restriction and data portability. You may object to processing based on legitimate interests on grounds relating to your particular situation. You may withdraw consent at any time for the future.
Email us to exercise your rights. You may also complain to a data protection authority, including the Austrian Data Protection Authority.