Privacy Policy

Last updated: July 19, 2026

Specific information about the current data processing at Calcolaro.

Current Technical Status

Calcolaro is a freely accessible website with online calculators. Calculator values are processed locally in the browser and are not transmitted to a Calcolaro server. The privacy policy is excluded from the Google Privacy & Messaging CMP; advertising and Calcolaro's own client-side analytics tracking remain disabled.

1. Controller and Contact

The controller for Calcolaro is the private operator:

André Krüger
Hildeboldstraße 26
80797 München
Germany

Contact email: info@calcolaro.com. This address is set up, functional and tested. It can also be used for privacy requests.

The complete legal notice information can be found directly on the Legal Notice page. The Contact page is also available for general contact. No data protection officer is named because such an appointment has not been confirmed as operator information.

2. General Principle

Calcolaro offers free online calculators without a user account. Calculations are generally performed directly in the browser. According to the current technical status, entered calculator values are not transmitted to the Calcolaro server and are not permanently stored in a user account.

Calcolaro does not create user profiles and does not carry out automated decision-making or profiling by Calcolaro. This description relates to the audited current operation and is not a guarantee for technical processes outside Calcolaro's sphere of influence.

3. Website Access and Hosting

The website is provided via the hosting provider and technical service provider Hostinger. The contracting party is Hostinger International Ltd., 61 Lordou Vironos Street, Larnaca 6023, Cyprus. The website's primary server location is Germany; the primary location of the website backups is France. Germany, France and Cyprus are within the European Union or the EEA.

When the website is accessed, technically necessary connection data is processed. Depending on the request, this includes in particular IP address, date and time, page or resource accessed, HTTP method, HTTP status, amount of data transferred, response time, browser and operating system or user agent, technically transmitted headers and a country derived from the IP address.

The purposes are delivery of the website, establishing and maintaining connection stability, operational security, error analysis, protection against misuse and attacks, and technical administration. The legal basis is Art. 6(1)(f) GDPR. The legitimate interest lies in providing the website securely, stably, reliably and protected against misuse.

4. Access Logs and Hostinger Analytics

Hostinger keeps server-side access logs. In hPanel, among other things, full IP addresses, time, requested resource, user agent or device and browser, derived country, response size and response time were visible. Hostinger also provides aggregated analytics overviews from server-side access data.

The operator has so far not regularly used this analytics overview for active visitor analysis. Calcolaro does not use its own client-side analytics or tracking script. Google Analytics, Google Tag Manager, Matomo, Plausible or comparable systems are not active according to the current technical evidence.

The exact storage period for full access logs, the storage period for aggregated analytics data, storage locations of centralized logging systems, possible shortening or anonymization of IP addresses, and periods for 4xx, 5xx, firewall and security logs are currently being clarified with Hostinger. Data is not knowingly stored indefinitely by the operator; provider-side storage and deletion processes may be outside the operator's direct access.

5. Hostinger CDN

Hostinger CDN is active for calcolaro.com; CDN Development Mode is disabled. Website requests and static content may therefore be delivered via the distributed CDN infrastructure.

Technically, IP address, timestamp, requested resource, HTTP headers, user agent, and connection and security data may be processed. The purposes are faster and more reliable delivery, reduced server load, stability and defense against abusive or harmful access.

The legal basis is Art. 6(1)(f) GDPR. The legitimate interest lies in providing the website with performance, security and stability. Specific CDN PoP countries, CDN processing countries, CDN log types, CDN log storage periods, cache periods and possible additional subprocessors have not yet been fully determined. Therefore, it is neither claimed that all CDN processing takes place exclusively in Germany or France, nor that third-country processing can be safely excluded or has actually been proven.

6. Website Backups

Automatic daily website backups are active for calcolaro.com. The website backup location is France. Manual backups can be created via hPanel; restoration is possible via hPanel.

The purpose is to restore the website after technical errors, data loss, misconfigurations or security incidents. The legal basis is Art. 6(1)(f) GDPR. The legitimate interest lies in ensuring the availability, integrity and recoverability of the website.

Open points are the specific retention period, possible alternative or replicated backup locations, encryption details, final deletion after contract end and the inclusion of certain log data. The production website currently has no active user database; according to the current technical findings, calculator values or user profiles are therefore not stored in website backups.

7. Local Calculator Processing

Calculator values are processed directly in the browser. According to the current technical status, Calcolaro does not transmit these inputs to its own backend server. The results are displayed directly in the browser and are not stored in a Calcolaro user account.

According to the current live evidence, no cookies, Local Storage or Session Storage are used for calculator values. Clipboard copy functions are triggered only by a deliberate user action; the clipboard is not automatically read or transmitted.

8. Contact by Email

The website uses a mailto: link and no dedicated server-side contact form. When clicked, the user's email program or email service opens. Transmission only takes place when the user actually sends the message. Incoming messages are processed by Hostinger Email.

Depending on the message, name or sender designation, sender email address, subject, message content, date and time, technical email metadata, voluntary attachments and other voluntarily transmitted information may be processed.

The legal basis is Art. 6(1)(b) GDPR if the request is directed at a contract or pre-contractual measures. For general requests and feedback, Art. 6(1)(f) GDPR is the legal basis; the legitimate interest lies in properly handling the request. Where statutory retention obligations exist, Art. 6(1)(c) GDPR applies.

General contact and feedback messages are generally deleted no later than six months after final processing, unless there is a statutory obligation or another necessary reason for retention. Spam and obviously irrelevant messages are deleted promptly. The trash is permanently emptied no later than after 30 days. Attachments are generally deleted together with the associated message. Open matters remain stored until completion. Messages required for legal, contractual, tax or legal-defense purposes may be retained longer.

Documented technical protection measures include sole operator access, hPanel 2FA, webmail 2FA and secured recovery codes. Security details are not published here.

9. Cookies and Device Storage

On eligible pages, the official Google Privacy & Messaging CMP may store a privacy decision in cookies or comparable browser mechanisms. The type, names and lifetimes of the CMP storage actually set will be additionally documented after a controlled live test.

Access to "Privacy and cookie settings" is shown only on eligible pages when the official Google API is available. Calcolaro does not operate its own cookie banner and does not develop its own consent storage.

This statement does not mean that technically necessary device access can never occur or that all browser or provider functions are under Calcolaro's control.

11. Affiliate Links

Affiliate programs and affiliate links are currently only planned. According to the inventory, no affiliate tracking currently takes place and no affiliate cookies are set. If introduced later, this privacy policy will be updated accordingly in advance.

12. External Links

Calcolaro may link to external websites. Merely displaying a Calcolaro page does not automatically load content from those linked pages, unless there is an embed. Only when clicked does the user leave Calcolaro. The respective operator of the target page is responsible for data processing on that page.

13. Recipients and Data Processing on Behalf of the Controller

The currently relevant external technical recipient or service provider is Hostinger for web hosting, CDN, backups and email service. A distinction must be made between the operator as controller, Hostinger as technical service provider, the email providers involved on the senders' side and, where applicable, additional Hostinger subprocessors.

According to the current documentation status, the Hostinger Data Processing Addendum still needs to be checked with regard to the specific version and incorporation. Therefore, no specific version is presented as individually confirmed.

14. Processing Outside the EEA

The primary web server location is Germany, the website backup location is France and the contracting party is Hostinger International Ltd. in Cyprus. These confirmed locations are within the EU or EEA.

Because of the active CDN, centralized provider services, email infrastructure and possible subprocessors, additional processing countries cannot currently be fully excluded. Specific CDN PoPs, log locations, email locations and subprocessors are being clarified with Hostinger.

If personal data is processed outside the EEA, this may only take place on a basis permitted under the GDPR and with appropriate safeguards. A specific third-country transfer and standard contractual clauses are not claimed as an individually confirmed contractual basis as long as this has not been evidenced.

15. Storage Period

Known periods: general completed contact requests are generally stored for no more than six months after completion, the trash for contact emails is permanently emptied no later than after 30 days, and spam is deleted promptly.

Unknown or provider-dependent at present are the periods for access logs, error logs, CDN logs, hPanel analytics, website backups, email logs, email backups and recovery systems.

For unknown periods, the criteria include in particular necessity for secure and stable operation, error analysis, misuse and attack detection, recovery, contractual provider processes and statutory retention obligations. It is not claimed that the operator can directly delete provider-side data where this is technically not possible.

16. Data Subject Rights and Right to Lodge a Complaint

Where the statutory requirements are met, the following rights exist:

Access
Rectification
Erasure
Restriction of processing
Objection
Data portability
Withdrawal of consent granted, with effect for the future
Complaint to a data protection supervisory authority

Withdrawal does not affect the lawfulness of processing before the withdrawal. The right to object applies in particular to processing based on legitimate interests. Requests can be sent to info@calcolaro.com. If there are justified doubts, additional information for identity verification may be required.

You also have the right to lodge a complaint with a data protection supervisory authority. This may in particular be the supervisory authority of your usual place of residence, your place of work or the place of the alleged infringement. For private bodies in Bavaria, the Bavarian State Office for Data Protection Supervision is generally responsible.

17. Obligation to Provide Data

The website can be visited without actively providing contact details. Calculator values are entered voluntarily and processed locally. Contact by email is voluntary. Without an email address or sufficient information, a specific request may not be answerable.

There is no automated decision-making and no profiling by Calcolaro.

18. Status and Changes