Privacy Policy
Last updated: 8 September 2026
Logifin (logifin.eu, hereafter "Logifin", "we", "the Site") is committed to protecting the personal data of its visitors in accordance with Regulation (EU) 2016/679 (GDPR), Greek Law 4624/2019 and applicable national and Union legislation.
The founding principle of Logifin is data minimisation. The Site is designed to operate without user accounts and without storing the data you enter into the tools. We hold no user database, we build no visitor profiles and we have no technical means of accessing the figures you enter into the calculators and trackers. The minimal personal data connected to our customers is not stored on our own servers but is held by our specialised providers: the payment platform knows who paid and the email provider knows who receives the subscriber content, as described in detail in section 2.
Data controller: LOGIFIN E.E., 53 Kyknon Street, Galatsi 111 46, Greece, VAT number 802882455, General Commercial Registry (GEMI) 184559201000. Contact: info@logifin.eu.
1. The core principle: tool data never leaves your device
Every interactive tool on the Site runs entirely inside your browser. This applies to the DCA Calculator, the Investment Calculator, the Budget Tracker, the Portfolio Tracker, My Plan and any report they produce.
Specifically:
- Whatever you type (amounts, income, expenses, transactions, holdings, dates, scenario names) is stored only in your browser's local storage and only on the particular device you are using.
- This data is never sent to us, never passes through our servers and is not technically accessible to us or to any third party.
- Calculations run locally. There is no server processing your financial information.
- Because we keep no copies, we cannot recover data that has been lost and we cannot respond to an access request for it, for the simple reason that we do not hold it.
Safeguarding your data is your responsibility. Clearing browsing data, using private browsing, switching browser or device and uninstalling the browser all result in the permanent loss of your entries.
1.1 Moving to another device and backups
Since there is no account, there is no automatic synchronisation between devices either. The Site gives you two ways to move data, both entirely under your control:
- Backup file. In the trackers you can download your data as a file on your device and restore it elsewhere. The file is generated locally and is not uploaded anywhere. Once you save it, keeping it safe, encrypting it or deleting it is your responsibility.
- Calculation link (share link). In the calculators you can copy a link that carries the parameters of the calculation inside the address itself. Please note: anyone who obtains the link can see the figures it contains. Do not share links holding figures you consider sensitive. These links apply to the calculators only. The Budget Tracker and the Portfolio Tracker deliberately have no such feature, precisely because they hold personal financial data.
2. What we actually process
Although the tools run locally, some processing is technically unavoidable or follows from an action you take. Every such case is described below.
2.1 Server log files
The Site is hosted on the Vercel Inc. platform. As with every website on the internet, the server automatically records technical information about each request: IP address, date and time, the page requested, browser and operating system type, response code and referring page.
- Purpose: operation, security, error detection and protection against abuse and overload.
- Legal basis: legitimate interest (Article 6(1)(f) GDPR) in the secure and uninterrupted operation of the Site.
- Retention: these logs are kept by the hosting provider for a limited period under its own policies and are not used by us for traffic analysis or profiling.
2.2 Newsletter subscription
If you subscribe voluntarily, we process only your email address; the form asks for no name.
- Provider: the Kit service (ConvertKit LLC), acting as a processor on our behalf. The form submits your details directly to the provider. We keep no copy of the list on the Site's servers.
- Legal basis: your consent (Article 6(1)(a) GDPR), which you may withdraw at any time. The subscription is completed only once you confirm it through the email you receive (double opt-in).
- This flow is independent of the emails that Logifin Circle subscribers receive as part of their subscription (section 2.5).
- Retention: until you withdraw consent or unsubscribe. Every message carries an unsubscribe link.
- The provider may record technical delivery and interaction data (delivery, opens, clicks) under its own terms.
2.3 Contacting us
Anything you send us voluntarily by email is processed solely in order to answer your request.
- Legal basis: legitimate interest in serving you properly or performance of a contract where applicable.
- Retention: for as long as the purpose of the communication requires and any legal retention obligation applies.
2.4 Purchases of digital products and subscriptions
Sales of the digital products and of the Logifin Circle subscriptions are made through Stripe, which acts as the merchant of record and appears on your statement as LOGIFIN.EU. Payment is completed on a secure page hosted by Stripe. The Site hosts no payment form and Logifin does not collect, see or store payment details (card numbers, bank accounts or billing addresses). Stripe processes the order and payment details under its own terms and its own privacy policy, as an independent controller.
In order to deliver what you have bought and to verify an active subscription, our server looks up in Stripe only the strictly necessary transaction details (payment status, subscription status and tier and, for subscriptions, your email address) without storing them: we keep no customer database and every check queries Stripe afresh.
- Purpose: performance of the purchase, delivery of the digital content and verification of an active subscription.
- Legal basis: performance of a contract (Article 6(1)(b) GDPR).
- Retention: none on our side; transaction records are kept by the respective selling platform in accordance with the law governing it.
2.5 Logifin Circle subscriber emails
A substantial part of the Logifin Circle subscription is delivered by email (for instance the monthly Brief and the periodic editions). For this reason, upon activation of your subscription, the email address you provided at payment is automatically registered with our email provider Kit (ConvertKit LLC, USA), acting as a processor on our behalf, together with an indication of your subscription tier and a copy of your activation key, so that we can reissue it to you if you lose it.
- Legal basis: performance of a contract (Article 6(1)(b) GDPR); without this registration the service you purchased cannot be delivered, which is why no separate consent is requested.
- Retention: for as long as your subscription lasts. After it ends or is cancelled, your profile is marked inactive and no further subscriber content is sent; the email address and the stored copy of the key are retained for up to 12 months after termination, so that reactivation and proof of the contractual relationship remain possible, and are then deleted, unless you have separately subscribed to the free newsletter or you request their earlier deletion at info@logifin.eu.
- The provider may record technical delivery and interaction data under its own terms.
One-time purchasers of digital products are added to no email list whatsoever. Signing up for the free newsletter (section 2.2) is an entirely separate flow and always requires your consent.
2.6 Market data shown on the Site
Some pages display market information (indices, exchange rates, prices and historical returns of financial instruments). This data is requested by our server from a publicly available source and served ready to the page.
This choice is deliberate and works in your favour: your browser never contacts the data provider, so your IP address and browsing details are not disclosed to it and you cannot be tracked through these features.
2.7 Anonymous traffic measurement
So that we know which articles are read and where visitors arrive from, we use Vercel Web Analytics, the measurement service of the same platform that hosts the Site.
This measurement differs materially from the usual analytics tools:
- It uses no cookies. The only thing left on your device is a session-storage flag, with no personal data, that disappears when you close the tab, so that the use of a tool is counted once per visit (Cookie Policy, section 4).
- A visitor is identified by a hash derived from the request itself, which resets every day. It is therefore not technically possible to follow you from one day to the next, nor to recognise you on other websites.
- What is recorded is aggregate information: the page requested, the date, the country, the device and browser type and the page you arrived from.
- No profile is built and no measurement is linked to a person.
In the same way, without cookies and without any personal identifier, Vercel Speed Insights measures how fast pages load for visitors (loading times per page, device and connection type), so that we can find slow pages.
We also record a few neutral events: that a newsletter signup happened, that a tool was used or shared, that a backup was downloaded, that a partner link, an external link or a purchase button was clicked, and which address was requested when a page was not found (only its path, without parameters). Only the fact and the place on the Site are recorded, never who did it and never any figures, amounts or other details you have entered. Tool data still never leaves your device.
- Purpose: to understand which content is useful and to improve the Site.
- Legal basis: legitimate interest (Article 6(1)(f) GDPR) in measuring and improving our service. The processing is anonymous, leads to no profiling and has minimal impact on your rights.
2.8 Subscriber access cookie (logifin-key)
If you activate a Logifin Circle subscription on the activation page, your browser stores a first-party cookie named logifin-key, which contains solely the activation key (of the form LGF-…) that you already hold. Its only purpose is access control: it allows the server to establish, before sending you the page, that you are entitled to the full subscriber content. Duration: 1 year. It is set with SameSite=Lax and, over a secure connection, with the Secure attribute.
The key is also stored in your browser's local storage (entry logifin-license), together with a simple membership flag (entry logifin-member), so that the cookie is restored automatically if it is deleted; removing it permanently from the device requires deleting both the cookie and the logifin-license entry. The server stores neither the cookie nor the key: on every check it queries Stripe to establish whether the subscription is active.
This cookie is strictly necessary for the provision of a service you have expressly requested and is therefore exempt from the consent requirement (Article 4(5) of Greek Law 3471/2006); it is nevertheless listed here and in the Cookie Policy for the sake of full transparency.
3. What we do not do
For the sake of transparency we state explicitly that the Site:
- uses no tracking, statistical or advertising cookies; the only cookie ever set is the strictly necessary
logifin-keyaccess cookie for Logifin Circle subscribers, described in section 2.8 and in the Cookie Policy, and it is set only through your own action; - embeds no Google Analytics, Google Ads, Meta Pixel or equivalent third-party advertising tools;
- builds no visitor profiles and carries out no automated decision-making producing legal effects within the meaning of Article 22 GDPR;
- does not follow a visitor across different days or across websites;
- does not sell, rent or exchange personal data;
- collects no special categories of data (Article 9 GDPR).
4. Transfers outside the EU and EEA
Some of the providers we use are established in or process data outside the European Union, mainly in the United States: Vercel Inc. (hosting and traffic measurement), Stripe (sales platform) and ConvertKit LLC (Kit) (email service). Every such transfer is covered by appropriate safeguards under Chapter V of the GDPR: the EU-US Data Privacy Framework, where the provider appears on the list of certified organisations, or otherwise the European Commission's Standard Contractual Clauses (SCCs). You may request a copy of the relevant safeguards at info@logifin.eu.
We remind you that tool data is transferred nowhere, since it never leaves your device.
5. Affiliate links and third-party sites
The Site includes affiliate links to third parties, notably to broker platforms, as well as links to the platform selling the digital products.
- We share no personal data with these partners.
- If you move to a third-party site, the processing of your data is governed solely by that site's privacy policy, which we recommend you read.
- Third parties may recognise that you arrived from the Site through a parameter in the link. This does not disclose your identity to them.
6. Security
The Site is served exclusively over an encrypted connection (HTTPS) and applies security headers to limit risk. The very fact that we keep no user database is the strongest security measure available: data that is never collected cannot leak from us.
Please note that the security of data remaining on your device depends on that device. If other people have access to your computer or phone, they may be able to see what you have entered into the tools.
7. Minors
The Site is intended for adults. We do not knowingly collect data from minors and the Site is not designed for use by persons under 18. If we become aware that a minor's details have been submitted, they will be deleted without delay once notified at info@logifin.eu.
8. Your rights
As a data subject you have the right of access, rectification, erasure, restriction of processing, objection and portability, as well as the right to withdraw your consent at any time, without affecting the lawfulness of processing carried out beforehand.
These rights concern the data we actually process, namely your newsletter subscription details, the Logifin Circle subscriber details held with our email provider (email address, subscription tier and a copy of the activation key) and your correspondence with us. For payment details, the competent party is primarily the respective selling platform as an independent controller; we will assist with any related request you make. As for the tool data, you hold absolute control directly on your device, by deleting it from the tool itself or from your browser settings.
We respond to every request within one month. You also retain the right to lodge a complaint with the Hellenic Data Protection Authority (1-3 Kifissias Avenue, 11523 Athens, www.dpa.gr).
9. Changes
We may update this policy to reflect changes in how the Site works or in the law. The version in force is published on this page with its date. In the event of a material change, in particular if user accounts or technologies requiring consent, such as statistical or advertising cookies, are introduced in future, you will be informed clearly and, where required, your express consent will be sought in advance.
10. Contact
To exercise your rights or for any question about this policy: info@logifin.eu.