Privacy Policy

1. Local app data (no server)

The Beauty Routine App stores the following data exclusively locally on your device (browser localStorage):

• The name you enter
• Your settings (gender, hair color, language)
• Your completed routine steps
• The appointments you enter
• Your cookie consent (bra_cookie_consent)

2. Cookies, tracking & consent (Art. 6 (1) (a) GDPR)

On your first visit, a cookie banner appears. The following services are only activated after your explicit consent:

Withdraw consent: You can withdraw your consent at any time using the following button:

3. Google Analytics 4

Only after your consent, Google Analytics 4 (Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) is used.

Processed data: Shortened IP address (IP anonymization is active by default in GA4), browser type, operating system, pages visited, time spent, approximate location (city level).

Storage period: 26 months

IP anonymization: Enabled, so your full IP address is not stored.

Legal basis: Art. 6 (1) (a) GDPR (consent)

More info: Google Privacy Policy

4. Advertising

No advertisements are currently displayed in this app. No advertising service (such as Google AdSense) is active at the moment – no advertising script is loaded and no advertising cookies are set.

Should an advertising service be used in the future, this privacy policy will be updated beforehand (processing entity, purpose, legal basis and storage period). Advertisements would then only be loaded after your explicit cookie consent.

5. Data transfer to the USA (Art. 49 GDPR)

Google LLC is based in the USA. When using Google Analytics (after your consent), data is transferred to the USA.

Safeguard: Google LLC is certified under the EU-US Data Privacy Framework (DPF), which was recognized by the EU Commission on 10 July 2023 as providing an adequate level of protection (Decision 2023/1795).

6. Hosting & domain

Website hosting: GitHub Pages
The files of this website are delivered via GitHub Pages (GitHub, Inc., 88 Colin P Kelly Jr St, San Francisco, CA 94107, USA). When accessed, GitHub processes technical connection data (IP address, timestamp), which is technically necessary.
Storage period: Server logs are stored by GitHub for a maximum of 7 days.
Safeguard: DPF certification plus Standard Contractual Clauses (SCCs).
Legal basis: Art. 6 (1) (f) GDPR
GitHub Privacy Statement

Domain & DNS: IONOS SE
The domain beautyroutine.app is registered and managed via DNS through IONOS SE (Elgendorfer Str. 57, 56410 Montabaur, Germany). During DNS queries, technical connection data (IP address) may be processed, which is technically necessary.
IONOS is a European company, so the GDPR applies directly.
Legal basis: Art. 6 (1) (f) GDPR
IONOS Privacy Policy

Reach measurement: Cloudflare Web Analytics (cookie-free)
For anonymous reach measurement we use Cloudflare Web Analytics (Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA). The service is cookie-free, sets no identifiers in your browser, builds no cross-device profiles and does not track individual visitors. Only aggregated statistics (e.g. page views, approximate region, referrer, browser/device type) are collected, without any personal reference.
Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in privacy-friendly reach measurement). As no cookies are set and no information is read from your device, no separate consent is required according to current assessment.
Safeguard: DPF certification + Standard Contractual Clauses (SCCs).
Cloudflare Privacy Policy

7. Service Worker (offline function)

This app uses a Service Worker for offline functionality (PWA). App files are stored locally in your browser cache:

• app.html, style.css, app.js, manifest.json

This data remains exclusively on your device and is not transmitted. You can clear the cache at any time via your browser settings.

8. Affiliate links & advertising partnerships (Amazon)

Current status: affiliate links are active. The "Cozy Picks" page and some blog articles contain links to products on Amazon. We participate in the Amazon affiliate program (partner tag beautyrout067-21) and receive a small commission when you buy through these links. This does not cost you anything extra.

What happens when you click: Only when you actively click such a link are you redirected to Amazon (EU operator: Amazon EU S.à r.l., 38 avenue John F. Kennedy, L‑1855 Luxembourg). Amazon then sets its own cookies to attribute any purchase to your click (commission tracking). This may involve processing of your data (including your IP address) on servers in the USA.

• All partner links are marked directly as "advertising"/"ad" or "affiliate link" (pursuant to Section 6 and Section 5a UWG)
• Amazon is responsible for the data processing after the click; Amazon's privacy notice applies
• Legal basis for embedding the links: Art. 6 (1) (f) GDPR (legitimate interest in funding the free service)
• Third-country transfer to the USA: Amazon relies on the EU-US Data Privacy Framework (DPF) and/or Standard Contractual Clauses (SCCs)

9. Your rights (Art. 15–21 GDPR)

You have the following rights at any time:

• Access to your stored data (Art. 15 GDPR)
• Rectification of incorrect data (Art. 16 GDPR)
• Erasure of your data (Art. 17 GDPR)
• Withdrawal of your cookie consent at any time (Art. 7 (3) GDPR), via the button above
• Objection to the processing (Art. 21 GDPR)
• Data portability (Art. 20 GDPR), see note below

Delete local data: App data (name, settings) directly in the app settings or via browser settings, then website data, then clear.

Contact: hello@beautyroutine.app

10. Right to lodge a complaint

You have the right to lodge a complaint with the Austrian Data Protection Authority:

Datenschutzbehörde Österreich (Austrian Data Protection Authority)
Barichgasse 40–42, 1030 Wien
dsb.gv.at | dsb@dsb.gv.at

11. Controller (Art. 13 GDPR)

Robert Thalhammer
Grabengasse 13/3/2
2630 Ternitz
Austria
Email: hello@beautyroutine.app

Commercial activity: Services in automatic data processing and information technology (free trade)