This notice describes how the personal data of SalvaMese users — a web application for planning fixed and recurring expenses — is processed, in accordance with Regulation (EU) 2016/679 (GDPR).
The service is developed and operated by an independent developer, not organized as a company. The controller's full identity is available on request by writing to [email protected], which is also the point of contact for any question regarding data processing.
Guest mode (without registration): data entered remains exclusively in the browser's local storage (localStorage) and is never transmitted to any server. It is cleared when logging out or clearing browser data.
With a registered account, the following is processed:
If logging in via Google, the controller only receives the email address associated with the Google account, without accessing any other profile data.
Data of registered users is protected by Row Level Security at the database level: each user can only read and modify their own data, and no other user can access it. Communications take place over an encrypted connection.
The service relies on the following providers, who process data on behalf of the controller:
Google, Cloudflare and Resend are legally headquartered in the United States; any transfers of data to these companies outside the European Economic Area are based on the standard contractual clauses approved by the European Commission.
Usage statistics: the application uses Cloudflare Web Analytics to measure traffic in aggregate form (number of visits, browser type, operating system, country of origin). This tool does not use cookies, does not employ fingerprinting techniques, and does not allow individual users to be identified or their behavior tracked over time.
Advertising: the site uses Google AdSense to display ads. For users in the European Economic Area, the United Kingdom and Switzerland, personalized ads are activated only after explicit consent via the banner shown on first visit, managed by a consent management platform (CMP) certified by Google. Consent can be revoked or changed at any time from the same banner. If activated, the service uses cookies and similar technologies for ad personalization and measurement. Without consent, no advertising cookies are set and the app remains fully usable.
Data is retained for the entire duration of the account. Deleting the account, which can be done independently from the application's settings, results in the permanent and irreversible deletion of all associated data.
Users may exercise, at any time, the rights provided by Articles 15-22 of the GDPR: access, rectification, erasure, restriction, objection and data portability. In particular:
For any other request, you may write to [email protected]. Users also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali).
The service is not intended for minors under 16 years of age. Data of users below this age is not knowingly collected.
This notice may be updated over time. The last-updated date shown at the top of the document indicates the version currently in effect.