Skip to content
Cindrus
Trust Center · Legal

The rules we follow, in plain language first.

The formal text is the same as in the Cindrus app.

Privacy policy

How we handle your personal data.

In plain language
Who is responsible
Cindrus is responsible for how your data is handled.
What we collect
What you give us: your account details, the loans, assets and settings you enter, and your messages to us. Plus the technical and security information needed to keep Cindrus safe. If you import a loan statement, the file stays on your device. Its text is read on our server, and neither the file nor the text is saved.
What we never do
We never sell your data and never share it for advertising.
Tracking
The Cindrus app uses no analytics. On cindrus.com we use Google Analytics, and only if you allow it.
Where it is stored
Our servers and database are in Germany. Card details are entered with our payment provider, Stripe, and are not stored on Cindrus' servers.
Your rights
You can see, correct and export your data and delete your account at any time, on every plan. You also have your other rights under the GDPR, and you can complain to the Danish Data Protection Agency (Datatilsynet).
How long we keep it
The full policy lists how long each kind of data is kept. Where a period has not been set yet, it says so.
Full formal text, version 2026-10-15, last changed 15 October 2026 →

Terms of service

The agreement between you and Cindrus.

In plain language
What Cindrus is
Information about your finances: your numbers, the market and the calculation. Not financial advice, and never a recommendation of a specific loan or provider.
Prices
The price you see is the total price you pay. Nothing is added on top. Prices are set per market in the local currency.
Free trial
A new subscription can start with a free trial of 14 days from the day you subscribe, one per person and per payment card. Nothing is charged during the trial, and we email you 3 days before it ends. The first payment is taken when it ends.
Automatic renewal
A monthly subscription renews for a month and a yearly one for a year, until you cancel.
Right of withdrawal
You have a 14-day right of withdrawal from the day the agreement is made. It is separate from the free trial and runs at the same time.
Changing or cancelling
You can cancel any time, at no cost. Your plan runs to the end of the period you have paid for, and your account then moves to Free. When you change plan, you see the price and when it takes effect before you confirm. Downgrading never deletes what you have entered, but you can't add more than the new plan allows.
Before you buy
You accept the terms and see the privacy policy and the purchase details before you pay. You must be at least 18 to buy a paid subscription.
Full formal text, with version and date →

Subprocessors

Companies that process data on our behalf, what for, and where.

In plain language
Hetzner
Hosting, database and backups. Germany.
Stripe
Card payments and receipts. We never see your full card number.
Resend
Sending email from Cindrus, such as receipts and account messages. Set to send from the EU (Ireland). Resend is a US company.
Logo.dev
Company logos next to some securities. Your browser fetches them directly, so Logo.dev receives your IP address and the security's ISIN.
Google Analytics
Website statistics on cindrus.com. Only if you allow analytics cookies. Not used in the Cindrus app.
Google Search Console
Statistics on how cindrus.com appears in Google Search. Sets no cookies on your device.
Changes
We update this list before a new subprocessor starts processing data, with the date of the change.
In the privacy policy, with version and date →

Security

What we do to protect your data. Specific facts, never "bank-level".

In plain language
Encryption
Every connection to Cindrus is encrypted, and so is every backup.
Security log
Security-relevant changes, such as sign-ins and changes to your loans, are recorded in a hash-chained log that cannot be rewritten without it showing. It holds no amounts and is kept for 24 months.
Backups
Backups are encrypted before they leave the server.
In the privacy policy, with version and date →

Accessibility

Cindrus should work for everyone.

In plain language
Our standard
We design for WCAG 2.2 AA. Today, text contrast is measured automatically in both light and dark mode.

Cookie policy

Which cookies we use and why.

In plain language
Necessary
Keep you logged in, protect forms and remember your choices. Always on. None is used for advertising or shared with anyone.
Preferences
Remember your language and market on cindrus.com. Only with your permission.
Analytics
Google Analytics (cookies _ga and _ga_*, kept for up to 2 years) on cindrus.com, to see which pages help people. Only with your permission. The Cindrus app uses no analytics.
Marketing
Not used.
Change your mind
Open Cookie settings in the footer at any time.
What cindrus.com stores on your device →