CakeDayCakeDay← Back

Privacy Policy

This privacy policy applies to the website cakeday.cc and to the mobile app CakeDay for Android and iOS.

The German version is the legally binding one and is available atcakeday.cc/datenschutz. This English text is provided for convenience.

1. Controller

Chris Langhans
Lindenstraße 4
71739 Oberriexingen, Germany
Email: cakeday@langhans.dev

2. Summary

CakeDay is built to collect as little data as possible. Your contacts' birthdays are processed exclusively on your own device and are never transmitted to us or to third parties. The website sets no cookies and embeds no analytics or tracking services. The app requires no user account.

3. Website

Hosting (Cloudflare Pages)

The website is hosted by Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA. When you open a page, Cloudflare processes technically necessary server log data (such as IP address, date and time of the request, the file requested, amount of data transferred, and user agent). This processing is required to deliver the website securely and reliably. The legal basis is Art. 6(1)(f) GDPR (legitimate interest). A data processing agreement is in place with Cloudflare, and transfers to the USA are based on the EU Standard Contractual Clauses.

Fonts

Fonts are served from our own server. No connection is made to third-party servers (such as Google Fonts), so your IP address is not disclosed to third parties.

Cookies and analytics

The website uses no cookies and no web analytics tools.

4. Mobile app

Access to contacts

To show upcoming birthdays, the app reads the birthdays stored in your phone contacts, only after you have explicitly granted the contacts permission. This data stays on your device and is not transmitted to us or to third parties. You can withdraw the permission at any time in your device's system settings. The legal basis is Art. 6(1)(a) GDPR (consent).

Notifications

Birthday reminders are generated as local notifications directly on your device. No personal data is transmitted to us for this purpose.

Advertising (Google AdMob)

The free version of the app shows advertising via Google AdMob (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). In doing so, AdMob may process device identifiers, the advertising ID, and technical device information. Personalized advertising is shown only after you consent via the consent banner displayed in the app; otherwise advertising is non-personalized. The legal basis is Art. 6(1)(a) GDPR (consent) and Art. 6(1)(f) GDPR (legitimate interest in non-personalized advertising) respectively. You can withdraw consent at any time in the app settings. Further information:policies.google.com/privacy.

Purchasing the premium version disables advertising.

In-app purchases (RevenueCat)

Purchases of the premium version are handled via RevenueCat, Inc. (633 Folsom St, San Francisco, CA 94107, USA). A pseudonymous app user identifier and the purchase status are processed in order to make your entitlement available across devices. The legal basis is Art. 6(1)(b) GDPR (performance of a contract). Transfers to the USA are based on the EU Standard Contractual Clauses. Further information:revenuecat.com/privacy.

Payment processing itself is carried out by the respective app store (Apple App Store or Google Play). The payment data processed there is the responsibility of Apple or Google.

5. Your rights

You have the right at any time to:

You may withdraw any consent you have given at any time with effect for the future. A message to the email address above is enough to exercise your rights.

6. Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority. The competent authority is:

Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg
Lautenschlagerstraße 20
70173 Stuttgart, Germany

7. Last updated

June 2026