Privacy Policy

1. Who is responsible

The controller responsible for processing your personal data under the EU General Data Protection Regulation (GDPR / DSGVO) is the operator named in our Imprint. Please refer to the Imprint for the full name and contact details.

2. What data we process and why

Piggy Bank is a Bitcoin/Lightning savings tool. We process only the data needed to operate it:

• Admin authentication. Administrators sign in via our authentication provider (Logto, hosted at logto.tsp.tools) using LNURL-auth or another supported method. We process a pseudonymous account identifier and, where your identity provider supplies it, a name, username or e-mail address, so we can identify you and secure your account.
• Piggy bank configuration. When an administrator creates a piggy bank we store its display name, an access code (PIN), and the connection details of the associated Lightning wallet (LNbits URL and API key). This is stored on our server so the piggy bank can be operated.
• Balance & payment display. To show a balance we query the connected Lightning wallet in real time and display its balance and the most recent payment’s amount, timestamp and optional comment. We do not build a payment history beyond what the wallet itself returns.
• Session cookies. We set strictly necessary cookies to keep you signed in and to remember your display preferences (such as light/dark mode). We do not use tracking, advertising or analytics cookies.
• Server logs. Our hosting provider processes standard technical log data (e.g. IP address, timestamp, requested URL, user agent) to operate and secure the service.

3. Legal basis

We process this data on the basis of Art. 6(1)(b) GDPR (performance of the service you request) and Art. 6(1)(f) GDPR (our legitimate interest in operating the service securely and reliably).

4. Recipients and third parties

Data is shared only with providers that help us run the service: our authentication provider (Logto), the Lightning wallet backend you connect (LNbits / your Lightning node), and our hosting provider. We do not sell your data or share it for advertising.

5. Retention

We keep account and piggy bank data for as long as the account exists or as needed to provide the service. You can ask us to delete it at any time (see below). Technical server logs are retained by our hosting provider for a limited period for security purposes.

6. Your rights

Under the GDPR you have the right to access, rectify, erase, restrict and port your data, and to object to processing. You also have the right to lodge a complaint with a supervisory authority — in Austria, the Datenschutzbehörde (dsb.gv.at). To exercise any of these rights, contact us via the details in our Imprint.