Privacy Policy

Last updated: October 26, 2026

Rethlasoft LLC, a Colorado limited liability company in the United States, runs these apps under the name Rethlasoft Labs and is responsible for the personal data described here. You can reach us at support@rethlasoftlabs.com. This policy covers our apps, which for now means SchengenLog (schengenlog.com).

What we collect

If you use an app without signing in, your trip data stays in your browser's local storage on your own device. We don't receive it.

If you create an account, we collect your email address and either a password you choose (we store only a salted hash of it) or, if you sign in with Google, your Google account's identifier and email. We also keep the dates you signed up and last signed in. If you save trips to cloud storage, we store those trips and notes on our servers so you can use them on other devices. For subscriptions we keep your plan, its status, your trial and renewal dates, and the identifiers Stripe uses for your subscription. We never see or store your card number. That goes straight to Stripe.

If you accept analytics in the banner that appears when you first visit, we track how you use our apps so that we can improve them. In that case, with or without an account, we use product analytics from PostHog to record which pages you view, where you came from, your device type, browser and operating system, your country, and which features you use, such as adding a trip or opening the planner. This is tied to a random identifier stored in your browser, not to your name or email. Until you accept, and if you decline, we only count visits: we receive each page view with where you came from, your device type, browser, operating system and country, and PostHog identifies the visit with an anonymous code it generates on its own servers. Nothing is stored on your device, we don't record sessions, and we don't see which features you use. You can decline, or change your choice later, with the "Analytics settings" link in the page footer. We also use anonymised session recordings to see where people get stuck, with form input masked. We don't record what's in your trips.

Our servers also log requests, including IP addresses, for security and to keep the service running.

Why we use it

We use your account data and saved trips to run your account and the service you asked for. We use subscription data to take payment, manage your subscription and issue refunds, and some of it to meet tax and accounting rules. We use your email to send sign-in links, password resets, receipts and renewal reminders. We use logs to keep the service secure and to stop abuse. If you accept analytics, we use usage data to see which features people use, find and fix problems, and decide what to build next.

If you're in the EU or the UK, the legal basis for running your account, taking payment and sending service emails is that we need the data to perform our contract with you, along with our legal obligations for billing records. For security, it's our legitimate interest in running the service. For analytics, it's your consent, which you can withdraw at any time with the "Analytics settings" link in the page footer.

We don't sell your personal data, show targeted ads, or track you across other websites.

Who else handles your data

Stripe processes payments and, through Managed Payments, acts as seller of record (shown to you as Link). Stripe's own privacy policy covers the payment data it handles. Resend sends our account and service emails. PostHog provides analytics, hosted in the EU under a data processing agreement. Our servers are Hetzner cloud servers in a data centre in Nuremberg, Germany, and our encrypted database backups are stored with Hetzner in the same region. If you choose to sign in with Google, Google is involved in that sign-in.

We share data with authorities only when the law requires it. If our business is sold or reorganised, your data may pass to the new owner under this policy.

Cookies and local storage

We don't use advertising or tracking cookies. Your browser's local storage holds your signed-out trip data, your language setting, your sign-in session and the anonymous analytics identifier.

Where your data goes

Your account data and saved trips are stored in Germany, and analytics data is processed in the EU. We're a US company, so we reach that data from the United States, and some of our providers, such as Stripe, Resend and Google, process data in the US and elsewhere. When personal data about people in the EU or the UK is transferred outside those regions, we rely on safeguards such as Standard Contractual Clauses with our providers.

Security

Connections to our sites use HTTPS. Passwords are stored as salted hashes. Our database backups are encrypted, and access to our servers is limited to the people who run them. No system is completely secure. If a breach affects your data, we'll tell you and the authorities as the law requires.

How long we keep it

We keep your account and saved trips until you ask us to delete your account, including after a trial or subscription ends. Once you ask, we delete them within 30 days. Analytics data is deleted after 24 months. We keep billing and tax records for as long as the law requires, usually several years. Server logs, including IP addresses, are kept for at most 90 days. Our backups cover a rolling 14-day window, so data you delete drops out of the backups within about 15 days.

To delete your account, email support@rethlasoftlabs.com from the address on the account.

Your rights

Depending on where you live, including under the GDPR, the UK GDPR and some US state laws, you can ask us for a copy of the personal data we hold about you, to correct it, to delete it, or to export it in a common format. You can also ask us to restrict or stop certain processing, including analytics, and you can withdraw consent where we rely on it. Email support@rethlasoftlabs.com and we'll reply within one month (45 days for some US requests). We won't treat you differently for using these rights. If you're in the EU or the UK, you can also complain to your local data protection authority.

Children

The apps aren't aimed at children under 16, and we don't knowingly collect their data. If you think a child has given us data, tell us and we'll delete it.

Changes

We may update this policy. The new version will be posted here with a new date, and for material changes we'll tell you by email or in the app.

Contact

Rethlasoft LLC (Rethlasoft Labs)
support@rethlasoftlabs.com