Privacy Policy

Short version: there is no account, no login, no newsletter and no database here. Visits are counted without cookies. Google Analytics runs only if you agree to it, and so does any advertising.

What we collect

The site is a set of static files with no session and no user record. One small function fetches the live metal prices and passes them on unchanged; it keeps no request log. What is measured about visits is described under “Statistics” below.

What this site contacts for you

To show live metal prices, a function on this site requests data from a public precious metals price feed (api.gold-api.com). Your browser talks only to this site. The feed sees one request from our server, not one from each reader, and is used under its own terms. Everything else is different: the debt comes from the US Treasury (fiscaldata.treasury.gov) and the macro series from the World Bank and the Bureau of Labor Statistics, all fetched when the site is built, so no visitor request is involved at all. Cryptocurrency prices come from CoinMarketCap the same way.

Those requests come from our server, so the providers see the server’s address and the time of the request, not yours. We add no identifier, cookie or tracking parameter, and the function keeps no log of who asked. The legal basis is our legitimate interest in showing current rather than outdated figures, which is the purpose of this site (Art. 6(1)(f) GDPR).

Some of these providers are located outside the European Union: the US Treasury (Bureau of the Fiscal Service) is in the United States, and the metals price feed does not state where it is operated. For these countries an adequate level of data protection within the meaning of the GDPR cannot be guaranteed in every case, and we have no contract with these public data providers. The metals feed is contacted by our server, not by your browser, so blocking the domain in your browser changes nothing. The debt is fetched once per build. Neither request carries anything about you, and the site remains fully usable either way.

Local storage

The site sets no tracking cookies of its own. It stores exactly one thing in your browser, and only once you have answered the cookie question: your answer, together with the date you gave it and the version of the notice you saw. That record exists so the question is not asked again on every page, and so the decision can be evidenced. Storing a refusal is as necessary as storing an agreement; without it, declining would be punished by an endless banner.

You can withdraw or change that decision at any time using “Change cookie choice” in the footer of every page. Withdrawal takes one click, exactly as consent did. Where Google’s certified consent tool is in use, the question is presented by Google and your answer is stored by Google in a cookie on this domain; the same footer button reopens it.

Statistics

To count visits we use Cloudflare Web Analytics, a service of Cloudflare, Inc. (see Hosting). It sets no cookies and stores nothing on your device. When a page loads, a small script from static.cloudflareinsights.com reports the page address, the referring page, browser and device type and page load timings. Your IP address is used only to determine the country and is not stored. The results are aggregated, are not used to identify you and do not follow you across other websites. The legal basis is our legitimate interest in knowing how the site is used and keeping it fast, Art. 6(1)(f) GDPR. You can block the script with a content blocker without losing any function.

With your consent we also use Google Analytics 4, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics stores cookies on your device (names beginning with _ga) and records which pages you view, how you arrived, how long you stay, and your device, browser, screen size and approximate location (city or region). Google does not log or store the IP addresses of visitors from the EU; they are used only to derive the approximate location and then discarded. We have switched off Google signals and all advertising features, and the data is deleted after two months.

Google processes this data on our behalf under its data processing terms (Art. 28 GDPR). Data may be transferred to Google LLC in the United States, which is certified under the EU-US Data Privacy Framework, for which the European Commission has adopted an adequacy decision (Art. 45 GDPR). The legal basis is your consent under Art. 6(1)(a) GDPR and §25(1) TDDDG. No Google Analytics code is loaded until you agree. You can withdraw your consent at any time with “Change cookie choice” in the footer of every page, which also deletes the analytics cookies from your device. The data is pseudonymous: we cannot connect it to your name. Questions about it can be sent to the address in the imprint.

Advertising

This site is free and paid for by advertising through Google AdSense. Advertising requires storing and reading information on your device, and no advertising code is loaded until you have agreed to it. If you decline, no Google advertising script is requested at all: not loaded and restricted, but never fetched. The consequence is honest: you see no ads, the site earns nothing from your visit, and every figure remains fully available to you.

If you agree, Google and its advertising partners may use cookies and similar technologies to select, deliver, measure and report on ads, which can include personalised advertising based on your activity across other sites. In that processing Google acts as an independent controller under its own privacy policy at policies.google.com/privacy, and its partners may transfer data outside the EU. Legal basis for this processing is your consent under Art. 6(1)(a) GDPR and §25(1) TDDDG.

Independently of the choice here, you can control personalised advertising in your Google account at myadcenter.google.com and opt out of third-party vendor cookies at aboutads.info and youronlinechoices.eu.

Hosting

This site is hosted on Cloudflare Pages, a service of Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA. To deliver a page and protect the service against attacks, Cloudflare necessarily processes your IP address and technical request data (such as time, requested address and browser type) and may keep them in logs for a short period. The legal basis is our legitimate interest in delivering the site securely and reliably, Art. 6(1)(f) GDPR. Cloudflare processes this data on our behalf under a data processing agreement (Art. 28 GDPR) and is certified under the EU-US Data Privacy Framework, for which the European Commission has adopted an adequacy decision (Art. 45 GDPR). We do not access, analyse or retain those logs.

Contacting us by email

If you write to the email address given in the imprint, your message is received through Cloudflare Email Routing and forwarded to a mailbox provided by Google (Gmail). We use your email address and the content of your message only to deal with your request. The legal basis is our legitimate interest in answering enquiries, Art. 6(1)(f) GDPR, or Art. 6(1)(b) GDPR where your message concerns a contract. We delete the correspondence once your request is settled, unless statutory retention obligations apply. Google is certified under the EU-US Data Privacy Framework.

Children

This site is not directed at children under 13 and knowingly collects no information from anyone, of any age.

Who is responsible

The controller for this site, in the sense of Art. 4(7) GDPR, is the operator named in full on the imprint page, together with a postal address and an email address. Any question about data protection can be sent there and will be answered.

Your rights

Under the GDPR you have the right to access your data, to have it corrected or erased, to restrict or object to its processing, and to receive it in a portable form. Where processing rests on consent, you may withdraw that consent at any time with effect for the future; the withdrawal does not affect the lawfulness of what happened before it.

The practical answer here is short: this site keeps no account, no log and no database, so it holds nothing about you to access, export or erase, unless you have emailed us, in which case we hold that correspondence as described above. The one piece of server-side code fetches public data and stores nothing about the request. The other exception is the cookie decision stored in your own browser, which you can change or delete yourself at any time and which never reaches us. For anything Google holds in connection with advertising, Google is the controller and its own privacy tools apply.

You also have the right to complain to a supervisory authority. In Germany that is the data protection authority of the federal state in which the operator is based.

Changes

This policy is updated whenever the site changes what it processes. The version on this page is always the current one.