BackupOnShutdown

Privacy Policy

How we collect, use, and protect your personal data

Last updated: 11 October 2026

1. Data Controller

The data controller for BackupOnShutdown is:

SPQRK IT-Services, Gerhard Petermeir, BA MSc
Haag 8
8344 Bad Gleichenberg
Austria
Email: office@spqrk.net

2. The BackupOnShutdown app

BackupOnShutdown copies the folders you choose to the drive, folder or network share you choose. That is the only place your backups go. There is no BackupOnShutdown server, cloud or account. We receive neither your files nor any information about them.

The app does not send telemetry or usage data.

Licence keys are checked on your device with a cryptographic signature. Activation does not contact us or anyone else.

The password you set for a backup is stored locally on your device in the app's configuration, protected by the operating system. We have no access to it.

The app does not check for updates on its own. "Check for Updates" in Settings only opens the download page in your browser.

3. This website

When you visit this website, the following data is processed:

  • Server log files: IP address, timestamp, page requested, browser identifier. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in the security and operation of the website). Server logs are kept only as long as necessary for the security and operation of the website, and are then deleted.
  • Cookies: Technically necessary cookies only. A session cookie is set only when you pick a currency on the pricing page (it remembers that choice) or when you start a checkout (it holds the purchase reference). The admin login uses its own session; that session is not set for visitors. The website stores no preferences in the browser. No analytics, advertising, or tracking cookies are set, and there is no cookie-consent dialog.
  • Currency and country preselection: On the pricing page your IP address is matched against a local copy of the MaxMind GeoLite2 country database to preselect a currency and, in the EEA, the United Kingdom, or Switzerland, your country. The result is not stored on our server. When you start a checkout, the country you chose and the country from that lookup are passed to Stripe with the order, to check the sale against the EEA, the United Kingdom, and Switzerland. Legal basis: Art. 6(1)(b) and (f) GDPR.
  • Download and purchase counters: When you download the installer, start a checkout, or complete a purchase, we record that event with your IP address, country, browser identifier, referring page, language, and a pseudonymous daily visitor hash, to count downloads and purchases and to prevent abuse. Legal basis: Art. 6(1)(f) GDPR. Entries are deleted after 90 days.
  • Web analytics: We use Umami, which we (SPQRK) host ourselves at paul.spqrk.net, on a server of Hetzner Online GmbH in Helsinki, Finland (EU). Hetzner acts as processor. Umami sets no cookies and stores nothing in your browser. For each page view it collects the page address (on checkout return pages, without the query string), the referring page, browser, operating system, device type, screen size, language, country, and an approximate region and city. Country, region, and city are derived from the IP address; the IP address itself is not stored. It also stores a pseudonymous visitor ID computed from the IP address, the browser identifier, and a salt that changes every month, so visits cannot be linked across months. The events it records are a download (the platform), a checkout start (the pricing tier), and a purchase (the amount and the currency). Umami follows your browser's Do Not Track setting. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in understanding the reach of the website and improving it). You can object under Art. 21 GDPR by enabling Do Not Track, by blocking paul.spqrk.net, or by emailing us. We keep this data for up to two years, and then delete it.

4. Payment and licence delivery

Payments are processed by Stripe (Stripe Payments Europe, Ltd. and Stripe, Inc.) on a hosted Stripe Checkout page, which we open by redirect. You enter your payment details on Stripe's page; we have no access to your full payment details. Stripe sets its cookies on its own domain (checkout.stripe.com), not on ours. Where Stripe processes data in the United States, it does so under the EU-US Data Privacy Framework. From Stripe we receive your name, email address, billing address, and the invoice. Legal basis: Art. 6(1)(b) GDPR (performance of a contract). More information: Stripe Privacy Policy.

To deliver your licence key by email, re-send it on request and handle refunds, we store the email address used at checkout, the licence keys issued and the reference of the Stripe purchase. Payment and licence records are kept for seven years as required by § 132 of the Austrian Federal Fiscal Code (BAO).

Withdrawal declarations (name, email, reference and time) are processed to handle the withdrawal and kept as evidence, on the same retention basis as order records (Art. 6(1)(c) GDPR).

5. Email support

When you write to office@spqrk.net, we process your email address and the content of your message to answer your request. Legal basis: Art. 6(1)(b) GDPR (questions about your purchase) or Art. 6(1)(f) GDPR (general enquiries). We keep the correspondence for as long as handling your request and any follow-up requires.

6. Your Rights

Under the GDPR, you have the following rights regarding your personal data:

  • Right of access: You can request access to your personal data.
  • Right to rectification: You can request correction of inaccurate or incomplete data.
  • Right to erasure: You can request deletion of your data under certain conditions.
  • Right to restriction of processing: You can request that we restrict the processing of your data.
  • Right to data portability: You can request transfer of your data to another organization.
  • Right to object: You can object to the processing of your data for specific purposes.
  • Right to lodge a complaint: You have the right to lodge a complaint with a supervisory authority. The competent authority is the Austrian Data Protection Authority (Österreichische Datenschutzbehörde), Barichgasse 40-42, 1030 Vienna, Austria, www.dsb.gv.at, email: dsb@dsb.gv.at.

To exercise these rights, please contact us at office@spqrk.net.