We take the protection of your personal data very seriously. This Privacy Policy explains how we process personal data when you use our website and the CartPro App. We treat your personal information confidentially and in accordance with the applicable data protection regulations, in particular the General Data Protection Regulation (GDPR).
Last updated: August 2026
1. Data Protection at a Glance
General Information
This Privacy Policy provides an overview of what happens to your personal data when you use our website or the CartPro App. Personal data means any information that can identify you personally.
Data Collection
- Some data is collected when you provide it (e.g. via forms, settings, or app input).
- On the website, other data may be collected automatically by our systems or by tools you consent to (for example server logs or analytics).
- In the CartPro App, shopping data is stored locally on your device. We do not run an app backend that receives your lists. Purchases for CartPro Pro are handled by Apple and RevenueCat as described below.
Purposes
- Ensure the website and app work reliably
- Provide optional paid features (CartPro Pro)
- Improve the website where you have given consent
- Maintain security and prevent abuse
Your Rights
You have the right to access your personal data, rectify or erase it, restrict or object to processing, data portability, and to lodge a complaint with a supervisory authority.
2. Controller
Timo Pekx, Nighttime Verlag
Kolpingstr. 33
D-47647 Kerken, Germany
Email: info@nighttimemedia.de
The controller is the natural or legal person who determines the purposes and means of processing personal data.
3. Processing on Our Website
Hosting
Our website is hosted by IONOS SE, Germany. The hosting provider may process server log files (IP address, browser, operating system, referrer URL, time of access) to ensure reliable service and security. Legal basis: Art. 6(1)(f) GDPR.
WordPress & Wordfence
We use WordPress as CMS. Security-related data (such as login attempts) may be monitored via Wordfence Security to help prevent attacks.
- Provider: Defiant Inc., USA
- Legal basis: Art. 6(1)(f) GDPR (legitimate interest in security)
- Privacy Policy: wordfence.com/privacy-policy
Google Fonts
Our website may use Google Fonts. To display fonts, your browser can connect to Google servers.
- Provider: Google Ireland Limited, Ireland
- Legal basis: Art. 6(1)(f) GDPR / Art. 6(1)(a) GDPR where consent is required
- Privacy Policy: policies.google.com/privacy
Cookies and Consent (Borlabs Cookie)
We use Borlabs Cookie for cookie consent management. The tool stores your consent decision locally in your browser.
- Legal basis: Art. 6(1)(c) GDPR and Art. 6(1)(a) GDPR
Analytics (Google Analytics)
We use Google Analytics to analyze website usage, typically only after consent.
- Provider: Google Ireland Limited, Ireland
- Data may include IP address (often anonymized), device/browser data, and usage statistics
- Legal basis: Art. 6(1)(a) GDPR (consent)
- Privacy Policy: policies.google.com/privacy
4. Processing in the CartPro App
Local Data Storage
The app stores data locally on your device, for example:
- Shopping lists, items, and budgets
- App settings and preferences
- In-app progress and statistics
- Username
These data are not transmitted to our servers.
Import / Export & Sharing
Export, import, and sharing use your device’s local storage and system share sheets. We do not access these files on our servers.
Apple App Store & In-App Purchases
The app is distributed via the Apple App Store. Installation, updates, and CartPro Pro purchases or subscriptions are processed by Apple.
- App Store listing: CartPro on the App Store
- Provider: Apple Inc. / Apple Distribution International Ltd. (depending on your region)
- Legal basis: Art. 6(1)(b) GDPR and, where applicable, Art. 6(1)(f) GDPR
- Privacy Policy: apple.com/legal/privacy
We do not receive your payment or credit card details. Apple handles billing. Subscriptions are managed through your Apple ID / App Store settings.
RevenueCat
To unlock and manage CartPro Pro, the app uses RevenueCat for entitlement checks (entitlement identifier: pro).
- Provider: RevenueCat, Inc., USA
- Typical data: anonymous / app user identifiers, product and entitlement status, purchase timestamps, device/platform information needed for receipt validation
- Purpose: app functionality (unlocking Pro)
- Legal basis: Art. 6(1)(b) GDPR and Art. 6(1)(f) GDPR
- Privacy Policy: revenuecat.com/privacy
No Crash Analytics in the App
The CartPro App does not use Sentry or a comparable third-party crash-reporting SDK. We do not collect crash dumps from the app for our own analytics pipeline.
5. Recipients of Personal Data
Your personal data is generally not shared with third parties. Exceptions:
- Website hosting, security, consent, and analytics providers (for example IONOS, Wordfence, Borlabs, Google) as described above
- Apple for App Store distribution and in-app purchases
- RevenueCat for Pro entitlement management
- Authorities if legally required
Where providers are located outside the EEA, transfers may take place on the basis of appropriate safeguards (such as Standard Contractual Clauses) and/or the provider’s applicable transfer mechanisms.
6. Storage Period and Deletion
- Local app data remain on your device until you delete them or uninstall the app.
- Website analytics data (where collected with consent) are stored according to the respective tool settings, often for up to 12 months.
- Purchase and subscription records are retained by Apple and RevenueCat according to their policies and legal obligations.
- Other data are erased when the purpose no longer applies or deletion is legally required.
7. Data Security
We use technical and organizational measures to protect your data against unauthorized access, loss, or manipulation.
8. Your Rights
Under GDPR you have the following rights:
- Access (Art. 15)
- Rectification (Art. 16)
- Erasure (Art. 17)
- Restriction of processing (Art. 18)
- Data portability (Art. 20)
- Objection (Art. 21)
- Withdrawal of consent (Art. 7(3))
- Complaint to a supervisory authority (Art. 77)
9. Contact
For questions about data protection or your rights: info@nighttimemedia.de
10. Changes to This Privacy Policy
We may adapt this Privacy Policy to comply with legal requirements or reflect changes in our services. The current version is always available in the app and on this website.