Privacy Policy

The data controller for this site (Art. 4(7) GDPR) is Frank Dangelmayer — see the Imprint for contact details.

1. Hosting

This site is hosted on Cloudflare Pages. Like any web host, Cloudflare automatically records standard technical data for every visit — IP address, browser/device type, referring page, date and time, requested page. This happens automatically and isn't something we can switch off. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in operating a secure, working website).

2. Google Fonts

This site loads its typefaces directly from Google (fonts.googleapis.com / fonts.gstatic.com), which transmits your IP address to Google, including a transfer to the US. This specific setup has been the subject of German court rulings (e.g. LG München I) requiring either consent or self-hosting the font files instead. If you'd rather remove this section and this dependency entirely, the fonts can be self-hosted — say so and it's a quick change.

3. Local Storage (not cookies)

This site does not use cookies. With your consent, it uses your browser's sessionStorage — cleared automatically when you close the tab — to remember campaign parameters (e.g. which link or search result brought you here) for the duration of your visit. This exists purely so we can tell which channels are actually helpful; the accounting/VAT tool itself works identically with or without it.

Because this isn't necessary for the tool to function, we ask first: a banner on the homepage lets you accept or decline before anything is stored. If you decline, or haven't answered yet, nothing is written to sessionStorage. Your choice is remembered (also via localStorage, only for this purpose) so you aren't asked again on later visits.

4. Analytics

This site uses Cloudflare Web Analytics for basic visit and performance statistics. It's cookie-free and doesn't track individual visitors across other sites or log query strings.

This site also uses GoatCounter to record how visitors move through the accounting/VAT tool (e.g. which step they reach, whether they click through to a listed provider), so we can tell whether it's useful. GoatCounter doesn't use cookies, localStorage, or any other browser storage, and doesn't store information that identifies you individually — see GoatCounter's own explanation of why this doesn't require a consent banner. This is unrelated to the campaign-parameter storage in section 3, which does ask for consent.

5. Affiliate Links

This site participates in the affiliate/referral programs of the providers it features (currently Link My Books and hellotax). If you click through via a marked link on this site and sign up with that provider, they will know you came from this site and we may receive a commission at no extra cost to you. We don't receive any other information about you from this. See each provider's own privacy policy for how they handle data on their side: Link My Books, hellotax.

6. Your Rights

Under the GDPR, you have the right to:

• access the personal data we hold about you (Art. 15)
• have inaccurate data corrected (Art. 16)
• have your data deleted (Art. 17)
• restrict processing (Art. 18)
• receive your data in a portable format (Art. 20)
• object to processing based on legitimate interest (Art. 21)
• lodge a complaint with a supervisory authority (Art. 77) — for us, that's Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg (LfDI)

7. Automated Decision-Making

The 6-question tool on this site produces a content recommendation based on your answers. This is a simple content suggestion, not automated decision-making with legal or similarly significant effect under Art. 22 GDPR.

8. Changes to This Policy

We may update this policy as the site or the services it uses change. Check back occasionally for the current version.