Privacy policy

This English translation is provided for your convenience only. The German version of this privacy policy is the legally binding one.

1. Controller

CARDA APP LTD
71-75 Shelton Street
Covent Garden
London WC2H 9JQ
United Kingdom
Email: [email protected]

2. Overview

This website does not use cookies for analytics or advertising and does not embed any third-party content (e.g. Google Fonts, tracking services or social networks) in your browser. Fonts and scripts are loaded from our own server.

3. Hosting and server log files

When you visit the website, our server processes technically necessary data (IP address, date and time, page requested, browser and operating system, referrer). This serves to deliver the website and to defend against attacks (Art. 6(1)(f) GDPR). The log files are deleted after evaluation, at the latest after 7 days. The website is run by an external hosting provider in a data centre, which processes the data exclusively on our behalf (Art. 28 GDPR).

4. Content delivery network: Cloudflare

For protection and faster delivery, we use Cloudflare (Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA). Connection data such as your IP address is routed via Cloudflare's servers. The legal basis is our legitimate interest in a secure and stable website (Art. 6(1)(f) GDPR). Cloudflare is certified under the EU-US Data Privacy Framework. We have concluded a data processing agreement with Cloudflare.

5. Local storage in your browser

If you change the currency or unit of the price display, we save this choice in your browser's local storage (localStorage) so that it is kept the next time you visit. This data does not leave your device and can be deleted at any time via your browser settings (Section 25(2) no. 2 TDDDG – German Telecommunications Digital Services Data Protection Act).

6. Price alerts by email

If you set up a price alert, we store your email address, the selected metal and the target price in order to notify you (Art. 6(1)(a) GDPR). Registration uses a double opt-in. We delete unconfirmed registrations after 48 hours. You can delete the alert and your data at any time using the unsubscribe link in every email.

7. Contact form

If you write to us via the contact form, we store your name, email address, subject and message in order to answer your enquiry (Art. 6(1)(b) and (f) GDPR). To protect against misuse, we also store an encrypted hash value of your IP address from which the IP address cannot be restored. We do not use any third-party services or cookies for spam protection. Messages are automatically deleted after 180 days at the latest.

8. Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability and to object to processing (Art. 15–21 GDPR), and you can withdraw any consent you have given at any time. You can also lodge a complaint with a data protection supervisory authority, e.g. the authority of your German federal state.

9. Last updated

October 2026