1. Data Protection at a Glance

General information: The following notes give a simple overview of what happens to your personal information when you visit our website. Personal information is any data with which you could be personally identified.

Data collection on our website: SplitEasy operates completely in your browser. We do not require you to create an account, and we do not store your expenses, participants, or group names on our servers by default.

Our Core Principle

If you do not use the Cloud Sync feature, all your data stays strictly on your device in your local browser storage. We never see it.

2. Cloud Sync Feature

If you choose to use our optional "Save to Cloud" feature to share your expense group across multiple devices, the following applies:

  • Data stored: We store the group name, participants, expenses, debts, currency, and a hashed version of your security PIN.
  • Retention: Synced data is automatically deleted 60 days after it was last saved. You can also manually delete it at any time using the "Delete Cloud Data" button.
  • Encryption: Data is transmitted securely via HTTPS and accessed using a randomly generated 6-character code.

3. Third-Party Services

We use the following privacy-respecting third-party services:

  • Cloudflare Turnstile: Used to protect our Cloud Sync feature from bots and spam. Cloudflare Turnstile processes limited technical signals to distinguish humans from automated traffic and does not use intrusive advertising-style tracking. (https://www.cloudflare.com/turnstile-privacy-policy/)
  • Cloudflare Web Analytics: Used to understand website usage and performance. Cloudflare Web Analytics collects minimal aggregated metrics, does not use cookies or localStorage, and does not track individual users across websites. (https://www.cloudflare.com/web-analytics/)
  • Simple Analytics: Used to measure basic website traffic and usage in a privacy-friendly way. Simple Analytics does not use cookies, does not collect IP addresses, and only provides aggregated, non-personal analytics data. (https://docs.simpleanalytics.com/privacy)
  • Hosting: Our website is hosted on secure servers. Standard server access logs, such as IP address, time, and browser type, may be kept temporarily for security and debugging purposes.

4. Your GDPR Rights

You have the right to request information about your stored data, its origin, its recipients, and the purpose of its collection at no charge. You also have the right to request that it be corrected, blocked, or deleted. Since SplitEasy does not require accounts, simply clearing your browser data or using the "Delete Cloud Data" feature is the fastest way to exercise these rights.