Privacy Policy

The controller responsible for processing personal data on this website is: Leo — VanPowerCalc. Contact: leo@vanpowercalc.com. Website: https://vanpowercalc.com.

VanPowerCalc is operated non-commercially by a single individual. Funding comes exclusively from affiliate commissions (see section 9).

This website processes personal data in strict compliance with the General Data Protection Regulation (GDPR — EU 2016/679) and applicable national implementations. Below is a detailed breakdown of all processing activities.

This site is hosted by Vercel Inc. (340 S Lemon Ave #4133, Walnut, CA 91789, USA). On every visit, technical data is transmitted to Vercel servers: IP address (truncated after connection), User-Agent (browser, operating system), referrer URL, timestamp, HTTP status code.

Legal basis: art. 6(1)(f) GDPR (legitimate interest in secure and stable operation).

International transfer: processing may take place in the USA. Vercel is certified under the EU-US Data Privacy Framework, supplemented by Standard Contractual Clauses (SCCs).

Retention: server logs are deleted automatically after 30 days. DPA: https://vercel.com/legal/dpa

Content (SEO texts, affiliate links) and — for registered users — configuration data and email addresses are stored in a database operated by Supabase Inc. (970 Toa Payoh North #07-04, Singapore 318992, with US hosting).

Content tables (seo_pages, affiliate_links) contain no personal data. The saved_projects table contains data of registered users only (see section 5).

Legal basis: art. 6(1)(f) (technical operation) or art. 6(1)(b) (contract performance for registered users).

International transfer: US hosting. Supabase is not certified under the EU-US Data Privacy Framework; transfers are secured exclusively by Standard Contractual Clauses (Module 2, controller-to-processor) and a documented Transfer Impact Assessment.

DPA: https://supabase.com/legal/dpa

Users who create an account can log in via email or Google OAuth. Data processed: email address, OAuth provider ID (for Google login), configuration data of saved projects.

Legal basis: art. 6(1)(b) GDPR (contract performance).

Retention: until account deletion by the user. Deletion request by email to leo@vanpowercalc.com.

Authentication is handled by Supabase Auth (see section 4).

Transactional emails (account confirmation, password reset) are sent via Resend Inc. (2261 Market Street #4667, San Francisco, CA 94114, USA).

Data processed: email address, message content. No newsletter, no marketing email.

Legal basis: art. 6(1)(b) GDPR.

International transfer: USA. Resend is certified under the EU-US Data Privacy Framework, supplemented by Standard Contractual Clauses (SCCs).

DPA: https://resend.com/legal/dpa

For audience measurement, I use Vercel Web Analytics. This solution operates without cookies and without personal profiles.

IP addresses are hashed and rotated every 24 hours before storage. Data collected: aggregated page views, device type (desktop/mobile), approximate geographic region (based on IP, not stored at city or personal level). No advertising trackers, no cross-site tracking, no profiling.

This setup meets the criteria of EU supervisory authorities (CNIL Sheet n°16 / EDPB guidelines on cookieless audience measurement) for consent-exempt analytics.

Legal basis: art. 6(1)(f) GDPR (legitimate interest in audience analytics).

This site stores technically necessary data only in the user's browser (localStorage): vanvolt_appliances (the device list entered into the calculator), UI preferences (language, theme).

This data is never transmitted to a server and can be cleared at any time via browser settings.

Legal basis: art. 6(1)(f) GDPR (technical necessity for tool functionality).

VanPowerCalc is funded through affiliate commissions. Main partners: Amazon Associates Program (Amazon EU S.à r.l., 38 avenue John F. Kennedy, L-1855 Luxembourg); Awin Network (Awin AG, Eichhornstraße 3, 10785 Berlin — referrals to EcoFlow, Bluetti, ALLPOWERS, Imou, Renogy and others).

Affiliate links are clearly marked on the site with the indication "Ad" displayed directly adjacent to the link or within the relevant promotional block (in line with EU advertising disclosure requirements).

By clicking an affiliate link, you leave this website and are redirected to the partner's website. Cookies and tracking technologies of the partner may be set on the destination site; such processing is outside my control and governed by the partner's own privacy policy.

The redirect goes through an internal endpoint (/api/go/[key]). For audience measurement, fraud prevention, and to support the free service, the following data is logged for each click in the affiliate_clicks table: unique click ID (to reconcile with affiliate conversions); product key, language, network (Amazon / Awin); country (based on IP geolocation, not stored at city or address level); user-agent (browser fingerprint, truncated to max 512 characters); referrer URL (originating page); IP address as a SHA-256 hash (never stored in clear text, irreversibly pseudonymized).

Retention: 90 days at row level, then automatic aggregation into anonymous statistics.

Legal basis: art. 6(1)(f) GDPR (legitimate interest).

I passively use Google Search Console to monitor indexing. Only aggregated, non-personal data (queries, clicks, impressions) is processed. No user data is transmitted to Google beyond what Google already captures via its own search operations.

This site uses no advertising, tracking, or third-party cookies. Only strictly necessary cookies (within the meaning of art. 5(3) of the ePrivacy Directive) are used, and only if you actively log into an account: Supabase Auth session cookie to keep you logged in. Duration: session-bound, automatic refresh until logout.

For anonymous visitors, no cookies are set. Therefore no consent banner is required.

Functionally necessary storage also uses LocalStorage (see section 8).

Under GDPR, you have the right to: access the data concerning you (art. 15); rectification of inaccurate data (art. 16); erasure of your data (art. 17); restriction of processing (art. 18); data portability (art. 20); object to processing (art. 21); withdraw consent at any time (art. 7.3).

Exercise: by email to leo@vanpowercalc.com. Responses are free of charge and provided within statutory deadlines.

You have the right to lodge a complaint with a supervisory authority. The competent authority is the one in your country of residence or workplace. EU residents can find the list of national authorities at https://www.edpb.europa.eu/about-edpb/about-edpb/members_en. UK residents: Information Commissioner's Office (ICO), https://ico.org.uk.

Automated decisions / profiling: there is no automated decision-making within the meaning of art. 22 GDPR. No profiles are created, no scoring is applied.

Data security: data is protected pursuant to art. 32 GDPR through TLS/HTTPS transport encryption, sub-processor-level access controls, and regular backups.

Minors: this service is not specifically directed at persons under 16.

This policy is dated April 2026. It may be updated as legal or technical conditions evolve (new sub-processors, etc.). The current version is always available on this page.