What data is processed at LifeBudget and what rights you have.
This is a translation. The German version is legally binding.
This policy describes how personal data is processed when you use the LifeBudget website and Android app or contact the project team.
Felix Fenkart and Benjamin Berger
Contact address:
Anichstraße 26–28
6020 Innsbruck
Austria
The people named above are joint controllers for data processing at LifeBudget and your contacts for privacy requests. HTL Anichstraße is the project team’s school; it does not operate this website. See the imprint for further details.
The app stores game saves containing your chosen character details, game decisions, simulated income and spending, and names you give your saves in a local database. Language and light/dark appearance preferences are stored on your device. The game does not require real bank details or login credentials.
This data lets you resume your game and retain your settings. The app does not send it to us or hosting providers, and the website cannot read it. Saves remain until deleted or overwritten. You can delete individual saves in save management. To remove all local app data, use “Clear storage” in Android’s app settings or uninstall the app. Android system backup is disabled for LifeBudget.
The Android app requests no camera, microphone, location or contacts permissions. It has no push notifications, advertising IDs or built-in crash reporting services.
For updates, the app uses the “Internet access” and “Request install packages” permissions. On start, when you return to the app (at most once an hour) and when you choose “Check for updates”, it only loads the version details from this website. If there is a new version, it asks you; it only downloads the new APK once you confirm “Update”. If you choose “Later”, it stores that version number on your device and asks again for the next version. The same connection data is processed as for a download in the browser; saves and settings are not sent. Nothing is installed until you agree in the Android window.
“Copy JSON backup” and export in save management copy the save to the clipboard at your request. To import a save, you paste such text yourself; processing takes place locally. If you place a backup in a file, cloud service or message, you choose its location and recipients. Those copies remain after deleting the app and must be deleted separately where you stored them.
When you request a page or the Android installation file (APK), technically necessary data is processed: IP address, time, requested URL, referring page if supplied, and browser and operating system details. Without this connection, we cannot deliver the requested content. Downloads come directly from this website and require no store account.
Our web server keeps no access logs. Connection data may appear in error logs when technical errors occur. Log rotation is checked daily; non-empty logs are archived, with at most 14 archives retained. Each further rotation deletes the oldest archive.
Delivery, troubleshooting and protection against attacks are based on our legitimate interest in a secure, working service (Art. 6(1)(f) GDPR).
Website and email services are hosted with Index-Hosting (Kurz & Lankow GbR, Hochkönigstraße 2, 83395 Freilassing, Germany). According to the provider, its data centres are in Germany. We operate the web server ourselves.
The published website also uses Cloudflare, Inc., USA, for HTTPS delivery, caching and protection against attacks. Cloudflare receives the connection data described above. Browsers may also send technical error reports to Cloudflare when connections fail. Cloudflare retains data according to delivery and security needs and legal obligations; see Cloudflare’s privacy policy for details.
Processing outside the European Economic Area is possible, particularly in the USA. Cloudflare states that it is certified under the EU-US Data Privacy Framework; covered US transfers rely on the adequacy decision under Art. 45 GDPR. Cloudflare cites EU Standard Contractual Clauses under Art. 46 GDPR for other international transfers. See Cloudflare’s GDPR information for safeguards and details.
On your first visit, the language follows your browser. Only when you choose German or English yourself do we store that choice as “lifebudget-language” in localStorage. The value is not sent to us and has no fixed expiry. You can remove it by clearing this website’s data; the browser language then applies again. This storage serves your expressly requested language choice (Section 165(3) TKG 2021).
Our website code sets no cookies. We use no analytics or advertising services and serve fonts, images and scripts from our own site. Cloudflare may set technically necessary cookies for security checks. Their use and lifetime depend on the protection feature; see Cloudflare’s cookie documentation.
If you email us, we process your email address, your name if provided, message content, attachments and technical delivery data to handle your request. Providing this information is voluntary; without a way to contact you, we cannot reply. Our email services are also hosted with Index-Hosting.
The legal basis is our legitimate interest in answering project and support requests (Art. 6(1)(f) GDPR). Messages are deleted once the request is fully resolved, unless legal retention duties or necessary evidence for legal claims require retention. Any longer retention ends when that reason no longer applies.
Links to reference sources and other websites are links only. The other website is contacted and receives connection data when you follow a link. Its provider’s privacy notice applies to that processing.
Subject to the legal requirements, you have rights of access, rectification, erasure, restriction of processing and data portability (Art. 15 to 20 GDPR). You may object to processing based on legitimate interests on grounds relating to your particular situation (Art. 21 GDPR). You may withdraw any consent with effect for the future; this does not affect the lawfulness of earlier processing.
Contact the email address above to exercise your rights. We cannot access saves and settings stored only on your device; you can delete them as described above. There is no automated decision-making, including profiling, with legal or similarly significant effects.
You can complain to a competent data protection authority, particularly where you live, work or suspect an infringement. In Austria: Austrian Data Protection Authority, Barichgasse 40–42, 1030 Vienna, dsb@dsb.gv.at (Art. 77 GDPR).
This policy covers the functions currently available. A login is not available yet. Before introducing it, we will add information about account data, authentication, services used and deletion once the implementation is defined.
Last updated: 23 October 2026
