Privacy Policy

Who is responsible

The controller of your personal data is Kocsmarszky Zsolt, Hungary.

Contact: Kocsmarszky Zsolt, 1039 Budapest, Lukács György utca 18. 5/16, Hungary · hello@poolplanner.app

What is collected, and why

If you never sign in, no personal data is collected about you at all beyond the location lookup described next. Your design lives in your own browser.

Every visitor's approximate location is read from their IP address — the country, and now the region and city too — to show measurements in the right units and to price the cost estimate for your local market. It is used only for that page load, in your browser session, and is never stored on our servers.

If you sign in, the following is stored:

• Your email address — so the sign-in link has somewhere to go and so an account can be recognised. Legal basis: performance of a contract (providing the account you asked for).
• A display name, derived from your address by default and changeable by you — shown beside a design you publish. Legal basis: contract.
• The designs you save, and whether you published them. Legal basis: contract.
• Which designs you upvoted — so one account counts once. Legal basis: legitimate interest in a ranking that means something.
• The date you accepted these terms, and which version. Legal basis: legal obligation and legitimate interest in being able to show what was agreed.
• A hashed, non-reversible identifier for a design view, so a view count cannot be trivially inflated. This is not an IP address and cannot be turned back into one. Legal basis: legitimate interest.

Cookies and local storage

Strictly necessary, always on: a signed session cookie once you sign in; your language preference; and the design you are working on, kept in your browser's local storage so a refresh does not lose it. None of these are used to track you, and none are shared.

Analytics, only if you agree: product analytics that tell us which pages and features are used. These are off until you accept them in the consent banner, and you can change your mind at any time through “Cookie settings” in the footer.

Advertising measurement, only if you agree: a Reddit pixel, a Meta pixel (Facebook and Instagram) and a Google Ads tag that let us see which of our ads led to someone visiting, signing up or buying a plan. Each stores an identifier for your browser, and if you arrived from one of our ads, the identifier of that click as well — Reddit's for at most 28 days, Meta's and Google's for up to 90. Nothing of Reddit's or Meta's is loaded or stored before you accept the marketing category. The Google tag is present on PoolPlanner's pages before you decide, but in Google's consent mode with every permission denied: it stores nothing in your browser until you accept the marketing category, and only then keeps Google's advertising cookies (their names begin with _gcl_). Switching the category back off deletes all of these identifiers. See “Advertising” below for what is sent and when.

Beyond those three there is no ad network here, nothing on this site decides what you are shown from a profile of you, and there are no third-party embeds anywhere in the service.

Who else processes it

These providers process data on our behalf, under contract:

• Vercel Inc. — hosting and delivery (EU and US).
• Neon Inc. — the database that stores accounts and designs (EU).
• Resend — sending the sign-in link (EU and US).
• PostHog — product analytics, only with consent (EU).

Advertising

PoolPlanner advertises on Reddit, on Meta (Facebook and Instagram) and on Google. What follows describes Reddit; Meta and Google are described in their own paragraphs below, and differ only where those paragraphs say so. If — and only if — you have accepted the marketing category, two things follow. While you browse, each page you visit on PoolPlanner is reported to Reddit. If you then create an account or buy a plan, that is reported to Reddit as well. Legal basis: your consent, and nothing else.

Each of those events is reported twice on purpose — once from your browser, by the Reddit pixel, and once from our own server, because a browser can be closed, or the pixel blocked, before it reports anything. Both halves carry the same matching code, so Reddit counts one event rather than two.

What is sent, so that Reddit can tell whether the event belongs to someone who saw or clicked one of our ads: the identifier of the ad click you arrived from, if there was one; the identifier the pixel stored in your browser; your IP address, your browser's user agent and your screen size; the address of the page, without anything else its link carried, and of the page that referred you to it; and, for a purchase, the amount paid. If you are signed in, your email address and your account id are sent as well — never as themselves, only as SHA-256 hashes, which the pixel computes on your device and our server computes before anything leaves it. A hash cannot be turned back into your address, but Reddit can compare it with the hash of an address it already holds, which is the point of it: it is how a purchase on one device is connected to an ad seen on another. For a purchase, our server reports the browser the checkout was started in, not the machine that confirmed the payment.

Reddit is not merely working on our behalf here. It uses what it receives for its own purposes as an advertising platform, as a separate controller, under its own privacy policy. Reddit is established in the United States, and advertising is the one place where data reaches a recipient acting for itself rather than a supplier acting for us — which is why it happens on consent alone and why withdrawing consent stops it completely.

Meta: under the same consent and on the same pages, the Meta pixel reports each page you visit and, if you create an account or buy a plan, that event and, for a purchase, the amount paid. It is sent from your browser only — our server reports nothing to Meta. With each event Meta receives what a browser sends to any site it contacts — your IP address, your user agent and the address of the page — together with the identifier the pixel stored in your browser and the identifier of the Meta ad click you arrived from, if there was one. If you are signed in, your email address and account id are included as SHA-256 hashes, computed by the pixel on your device. The recipient is Meta Platforms Ireland Limited, which, like Reddit, uses what it receives for its own purposes as a separate controller under its own privacy policy, and transfers data to Meta Platforms, Inc. in the United States.

Google: Google's tag is present on every PoolPlanner page, and until you accept the marketing category it runs in Google's consent mode with every permission denied. In that state it sets and reads no cookies, and what it sends Google is a cookieless signal that a page was viewed: the page address, the time, your browser's user agent, the page that referred you, a random number that is new on every page load and the fact that consent was not given, with any ad-click identifier in the address redacted. Like any request your browser makes, it carries your IP address. Google states that these signals carry no identifier of you and are used for aggregate modelling, not to identify or profile you; we ask nothing more of them. If you would rather Google received nothing at all, a browser setting or extension that blocks googletagmanager.com does exactly that, and PoolPlanner works the same without it.

If you accept the marketing category, Google's tag stores its advertising cookies, records the identifier of the Google ad click you arrived from, and reports the pages you visit on PoolPlanner and, if you create an account or buy a plan, that event and, for a purchase, the amount paid to Google Ads, so that the sign-up or purchase can be attributed to the ad that led to it and so that Google may show you PoolPlanner's ads elsewhere. It is sent from your browser only — our server reports nothing to Google. If you have not accepted the marketing category, a purchase reaches Google only as the same kind of cookieless, unattributed signal as a page view. Google acts as a separate controller for what it receives, under its own privacy policy; Google LLC is established in the United States. Withdrawing consent puts the tag back into its denied state at once and deletes the cookies it stored.

If you never accept the marketing category, neither pixel is ever loaded, none of the three ever stores an identifier in your browser, and there is nothing for a later sign-up or purchase to be reported with — so no conversion is reported at all. The one thing that still happens is the cookieless signal from Google's tag described above.

How long it is kept

Account data and designs are kept until you delete your account or ask us to remove them. Sign-in links expire after fifteen minutes and are single-use. Consent records are kept for as long as the account exists, because their purpose is to evidence what was agreed.

Your rights

Under the GDPR you may ask for a copy of your data, ask for it to be corrected or deleted, object to or restrict processing, withdraw consent where processing rests on it, and ask for your data in a portable form. Write to the address above and we will answer within a month.

You may also complain to a supervisory authority. In Hungary that is the Nemzeti Adatvédelmi és Információszabadság Hatóság (NAIH), Budapest.

If you are in the United States

We do not sell personal information and never have. We do share a limited amount of it for cross-context behavioural advertising, as that term is used in the California Consumer Privacy Act as amended: the advertising measurement described above sends Reddit, Meta and Google ad identifiers, your IP address and browser details, the pages you visit, a purchase amount and, if you are signed in, hashes of your email address and account id (the hashes go to Reddit and Meta, not to Google). It happens only for visitors who have accepted the marketing category and never for anyone who has not, so the default state of this site is not to share at all; before you decide, Google's tag sends only the cookieless, aggregate signal described under “Advertising”, which is not used to build a profile of you.

“Cookie settings” in the footer is the opt-out: switching the marketing category off stops the sharing immediately and deletes the identifiers already stored. There is no account to create and no request to verify — it takes effect on the spot, and it is also how to opt back in.

California residents may request to know what personal information is held, request its deletion or correction, and are entitled not to be discriminated against for exercising those rights. Residents of other US states with comparable laws have comparable rights. Use the contact address above; we will verify the request against the email address on the account.

Data is processed in the European Union and, where a provider named above operates in the United States, transferred under that provider's standard contractual clauses.

Children

The service is not directed at children and accounts are not knowingly created for anyone under 16. If you believe a child has an account here, write to us and it will be removed.

Changes

This policy was last changed on 23 September 2026. If it changes substantively it will be dated again here.