Privacy
Privacy
This notice covers the Android app SPQRK Today and this website (today.spqrk.net). It is written under the General Data Protection Regulation (GDPR) and the Austrian Data Protection Act (DSG).
1. Controller
SPQRK IT-Dienstleistungen
Gerhard Petermeir, BA MSc
Haag 8, 8344 Bad Gleichenberg, Österreich
Phone: +43 660 1200109
E-mail: office@spqrk.at
No data protection officer is required by law. Further company details are on the Contact.
2. The SPQRK Today app
The app runs with no account and no server of ours:
- No account, no login, no sync, no backup to any server of ours.
- No analytics, no crash-reporting SDK, no advertising, no advertising ID.
- The app lists five platform permissions. POST_NOTIFICATIONS and RECEIVE_BOOT_COMPLETED are used for optional daily Plan and Done reminders; those stay on the device. com.android.vending.BILLING is what lets it offer the Pro purchase through Google Play; INTERNET and ACCESS_NETWORK_STATE arrive underneath it. No SPQRK code opens a network connection.
Every item, note and image attachment lives only in the app's own storage on your device. We cannot read it: nothing you write in your items is transmitted to us, and we never see your notes and tasks. Uninstalling the app removes that storage with it.
If Android backup is switched on — it is by default — Android copies your items and attachments to your own Google account. That copy sits with Google, not with us, and it is what survives a lost phone. Android's settings turn it off.
Since version 1.2.2 the app can show Google Play's own review card, so you can rate SPQRK Today without leaving it. If you use the card, your star rating and anything you write with it go to Google, not to us, and Google publishes both on the app's Play Store page, under the name and profile picture on your Google account. We can read a published review the same way anyone else can. If your copy of the app came from Play's testing programme that does not apply: Play publishes nothing, and your rating and your text come to us privately instead. Rating is optional, the card is Google's and not ours, and a review can be deleted again from your Google account.
3. Purchases
The app is free. SPQRK Today Pro is a one-time in-app purchase, not a subscription.
Google is the seller and takes the payment; in the European Economic Area the seller of record is Google Commerce Limited. You enter your payment details there; they reach neither this website, nor the app, nor us.
For a purchase, all we receive from Google is the Play Console's sales reporting: the order number, the product, the amount, the device model and the buyer's country. It carries no name, no e-mail address and no payment details.
To find out whether Pro is unlocked, the app asks Google Play about the account signed in on the device. No identifier reaches us in the process.
Refunds are handled under Google's terms. Do write to office@spqrk.at either way and we will help.
The legal basis is Art. 6(1)(b) GDPR (performance of the purchase contract).
Use and liability
Pro is sold through Google Play; Google is the seller, takes the payment and handles refunds under its own terms, and you can write to office@spqrk.at either way and we will help. We are liable without limit for personal injury and for damage we cause intentionally or through gross negligence; for slight negligence only where an essential contractual obligation is breached, and then only up to the typical, foreseeable damage. Your statutory warranty rights under Austrian and EU consumer law are not affected by any of this.
4. Shared links
Sharing an item from the app produces a link to today.spqrk.net/i. The item's content sits in the fragment of that link — the part after the #. Browsers do not send the fragment to the server.
This server therefore cannot see the contents of a shared item and does not log them. The page reads them entirely in the recipient's browser, and makes no request that carries the fragment. Do bear in mind that passing the link on also passes the content on: it is inside the link.
5. This website
This site sets no cookies at all — not strictly necessary ones, not any others. There is no analytics, no tracking, no pixel, no third-party embed and no consent prompt, because there is nothing that would need consent. Fonts and images are served from the same server; loading a page opens no connection to a third party.
Hosting and server logs
This site is hosted by Hetzner Online GmbH, Industriestraße 25, 91710 Gunzenhausen, Germany. The host processes data on our behalf under a data processing agreement pursuant to Art. 28 GDPR.
Each request is recorded automatically in server log files:
- IP address of the requesting device
- date and time of the request
- page or file requested, and the HTTP status code
- amount of data transferred
- referrer URL (the previously visited page)
- browser type, browser version and operating system
This data is technically required to deliver the site, to keep it stable and secure, and to trace faults. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in secure, uninterrupted operation). Log files are kept only as long as they are needed for those purposes and are then deleted. They are not combined with other sources and are not evaluated for advertising.
6. Getting in touch
This site runs no contact form. If you write or call, we process what you send in order to answer you. The legal basis is Art. 6(1)(b) GDPR where your enquiry concerns entering into or performing a contract, and Art. 6(1)(f) GDPR otherwise. Enquiries are deleted once they are settled and no statutory retention period applies. Please note that unencrypted e-mail cannot be fully protected against third-party access.
7. Your rights
In respect of your personal data you have the right to:
- access (Art. 15 GDPR)
- rectification (Art. 16 GDPR)
- erasure (Art. 17 GDPR)
- restriction of processing (Art. 18 GDPR)
- data portability (Art. 20 GDPR)
- object to processing based on legitimate interests (Art. 21 GDPR)
An informal message to the address above is enough to exercise them. If you believe your data is being processed unlawfully, you may lodge a complaint with the supervisory authority:
Österreichische Datenschutzbehörde, Barichgasse 40–42, 1030 Wien,
www.dsb.gv.at
8. Changes to this notice
This notice is updated whenever something it describes changes in the app or on this site. The version published here is the one that applies.
Last updated: August 2026