Data Controller
The data controller within the meaning of the General Data Protection Regulation (GDPR) is:
Hakan Gür
c/o COCENTER
Koppoldstr. 1
86551 Aichach
Germany
Email: g.uer@aol.com
The competent data protection supervisory authority is the Hessian Commissioner for Data Protection and Freedom of Information, P.O. Box 3163, 65021 Wiesbaden, Germany, datenschutz.hessen.de. Individuals with data protection concerns may contact this authority directly.
General
Calculations take place locally on the device. Calculator inputs are not automatically transmitted to the operator. No registration or sign-in is required. When the website is loaded, however, technically necessary connection data is processed by the hosting provider (Vercel Inc.). See the "Hosting" section below for details. The operator does not perform any personal evaluation of these connection data.
The descriptions of browser storage, the Service Worker, hosting and country-based redirects refer to the website and installed PWA. Local storage and export in the native iOS app are described in the "Native iOS App" section.
Local Data Storage
In the website and installed PWA, values entered by the user (such as consumption, prices, and mileage) and saved calculations are stored locally in the browser's storage (LocalStorage). These contents are not automatically transmitted to the operator.
When you share a calculation or export the history, contents may reach a recipient or storage location you choose as text, an image or a file. A history backup also includes saved notes. This is an action you initiate.
Inputs are stored on your own device and are not automatically transmitted to us. This storage is technically necessary for the features you use, so no consent is requested.
Native iOS App
The native iOS app loads its bundled pages and resources locally in a WebView. Saved calculations, notes and settings are held in local WebView storage in the app container, separately from the browser's website data. Starting these local contents does not use the website's Vercel hosting, Service Worker or country-based redirect. External links and sharing destinations you choose may use network connections.
Imported JSON backups are processed locally. For a JSON or CSV export, the app writes a temporary file to its cache directory (CACHE) and opens the native share dialog. You choose the recipient or storage location. After the sharing attempt, the app tries to delete its temporary file. If cleanup is interrupted or fails, the file may remain. Copies already shared or saved elsewhere are not removed by this cleanup or by deleting the app's history.
Service Worker / Offline Cache
This website uses a Service Worker, a standardised browser feature that caches HTML pages and static resources (CSS, JavaScript, fonts, images) in the user's browser. The sole purpose is faster revisits and offline availability of the app.
The Service-Worker cache holds only static assets (HTML, CSS, JavaScript, fonts, images) and does not store calculator inputs. Beyond the connection data already processed by the hosting provider when those assets are originally requested, the cache itself does not transmit anything. It is held in the user's browser. Clearing this cache alone removes the cached assets. Clearing all website data may also delete LocalStorage containing saved calculations, notes and settings.
Hosting
This website is hosted by Vercel Inc. When the website is accessed online, technically necessary connection data (in particular IP address, user agent, timestamp, requested resource (request URL) and referrer, if sent by the browser) are processed by the hosting provider to deliver the website, defend against attacks and ensure service stability. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in the secure operation of the website). For personal usage data and metadata generated through the operation of its services, Vercel describes processing as a controller.
Technical request data may be stored in Vercel's operational and security logs. Vercel's Privacy Notice describes purpose-based retention criteria, but does not specify a single deletion period for all log data.
The operator does not directly link this connection data to identifiable individuals.
Technical and Organizational Measures
To protect data processed via this website, the following technical and organizational measures pursuant to Art. 32 GDPR are implemented:
- Encrypted transmission of all data between browser and server via HTTPS (TLS)
- Strict Content Security Policy (CSP) to prevent cross-site scripting and unauthorized third-party scripts
- No server-side processing of calculator inputs by the operator: all calculations occur exclusively in the user's browser
- No tracking, analytics, or advertising technologies
- No cookies (features such as market or history storage operate exclusively via the browser's LocalStorage without data transmission)
- Regular updates of libraries and frameworks in use
- Hosting with an ISO 27001 and SOC 2 Type II certified provider (Vercel Inc.)
Beyond the infrastructure security mentioned above, the operator's safeguards consist in avoiding any data collection that goes beyond what is technically necessary.
International Data Transfers
According to Vercel's Privacy Notice, personal data may be processed in the United States and other countries. When this website is accessed online, this concerns technical request data such as the IP address. This does not automatically transmit locally stored calculations or notes to Vercel.
Vercel states in its Privacy Notice that it participates in the EU-U.S. Data Privacy Framework (DPF).
Vercel describes using Standard Contractual Clauses or other appropriate mechanisms for international transfers where required by law. The applicable basis for individual transfers in the operation of EVSpend still requires legal review.
Further information: Vercel Data Processing Agreement · Vercel Privacy Notice
Analytics and Tracking Services
Currently, no analytics, tracking, or advertising services are used on this website. No cookies are set for analytics or marketing purposes.
No Cookies
EVSpend does not set any cookies. Functional state (your selected market, theme, saved calculations and similar preferences) is held in your browser's localStorage. When you open a history link, entry identifiers such as id, entryKey or entryIndex may reach the hosting provider in the requested URL. These links do not embed calculator values or notes in the URL.
On first visit to the website, a server-side middleware may use the country header provided by Vercel (x-vercel-ip-country) to redirect to a matching language version: visitors from Türkiye to /tr/, visitors from most other countries to /en-eu/. Visitors from Germany, Austria, Switzerland and a few other countries stay on the default path. No cookies are set in this step, and no locally stored calculator inputs are read or processed on the server.
Market and language selection then happen in the browser, based on the page path, browser language and any locally stored choice from the in-app market selector. The selection is held only in localStorage.
You can clear the website's localStorage via your browser's site settings. This also removes the calculations, notes and settings stored there. This deletion does not transmit additional calculator contents to the servers.
California Residents (CCPA / CPRA Notice)
We do not sell or share your personal information within the meaning of the California Consumer Privacy Act (CCPA) or the California Privacy Rights Act (CPRA).
Since this service does not collect personal data beyond hosting logs processed by Vercel, no categories of personal information are disclosed for business purposes.
California residents retain the rights under Cal. Civ. Code § 1798.100 et seq. and may contact us at g.uer@aol.com to exercise them.
Supervisory Authority
The competent supervisory authority for data protection matters is:
Der Hessische Beauftragte für Datenschutz und Informationsfreiheit
Postfach 3163
65021 Wiesbaden
Germany
Email: poststelle@datenschutz.hessen.de
Website: datenschutz.hessen.de
You may also contact the supervisory authority in your EU member state of residence.
Future Services
If analytics tools, advertising services, or external content are integrated in the future, this Privacy Policy will be updated accordingly and users will be informed.
Contact
For privacy-related questions, the operator can be contacted using the details listed in the Legal Notice.
Your Rights as a Data Subject
You have the following rights vis-à-vis the controller regarding the personal data concerning you:
- Right of access (Art. 15 GDPR): You may request information about whether and which personal data we process about you.
- Right to rectification (Art. 16 GDPR): You may request the correction of inaccurate or completion of incomplete data.
- Right to erasure (Art. 17 GDPR): You may request the deletion of your personal data, provided the statutory conditions are met.
- Right to restriction of processing (Art. 18 GDPR): You may request restriction of the processing of your personal data.
- Right to data portability (Art. 20 GDPR): You may receive your personal data in a structured, commonly used and machine-readable format.
- Right to object (Art. 21 GDPR): You may object to the processing of your personal data on grounds relating to your particular situation.
- Right to lodge a complaint with a supervisory authority (Art. 77 GDPR): You have the right to lodge a complaint with a data protection supervisory authority.
The competent authority in Hesse, Germany, is the Hessian Commissioner for Data Protection and Freedom of Information, P.O. Box 3163, 65021 Wiesbaden, datenschutz.hessen.de.
To exercise these rights, please contact the address provided in the Legal Notice. Calculations are performed locally in your browser. When the website is accessed online, however, Vercel processes technical request data that may be included in provider logs. Retention information is provided in the “Hosting” section.