Privacy Policy

Datenschutzerklärung · Last updated: August 2026

Short version: Your property numbers never leave your browser — RendiScore's calculations run entirely client-side. The only personal data we process is what's needed to sell you a license and verify it: your email address, a license key, and a count of the devices it's activated on.

1. Controller

The controller responsible for data processing on this website is:

Graham Lloyd-Smith
Liststrasse 43
70180 Stuttgart, Germany
Email: info@renditum.com

2. What data we process

When you visit this website or use the calculator

This website and the RendiScore calculator are hosted on Netlify. Netlify may collect standard server log data (IP address, browser type, pages visited, timestamps) for security and operational purposes. Please refer to Netlify's privacy policy for details. We do not use analytics, tracking cookies, or third-party advertising on this site.

The property and financial figures you enter into the calculator (purchase price, rent, financing terms, and so on) are processed entirely in your browser and are never sent to our servers or any third party. If you use the "Save property" or "Compare" features, that data is stored only in your browser's local storage on your own device.

When you purchase RendiScore

Purchases are processed by Paddle.com Market Ltd, who act as Merchant of Record for the transaction. Paddle collects and processes the payment information and billing details needed to complete your purchase (card details are handled entirely by Paddle — we never see or store them). See Paddle's privacy policy for how they handle this data.

After a successful purchase, Paddle notifies our license system of your order and your purchase email address. We then:

Generate a license key and associate it with your purchase email address
Record, for each device you activate the license on, a device identifier and activation timestamp — capped at 5 devices per license, to prevent unauthorized sharing

This license data (email, license key, device activation records) is stored in Cloudflare Workers KV, a data store operated by Cloudflare. It is used solely to verify that a given device is entitled to unlock the paid features of RendiScore, and to let you re-activate your license on a new device (up to the 5-device limit) or update the email associated with it.

3. Legal basis (GDPR Art. 6)

Processing of your purchase and license data is based on Art. 6(1)(b) GDPR — processing necessary to perform the purchase contract you entered into. Server log data is processed under Art. 6(1)(f) GDPR (legitimate interest) for security purposes.

4. Third-party processors

We use the following sub-processors:

Paddle.com Market Ltd — payment processing and Merchant of Record. Paddle privacy policy
Cloudflare, Inc. — license verification (Workers & KV storage). Cloudflare privacy policy
Netlify, Inc. — website & application hosting. Netlify privacy policy

All processors are contractually bound to handle data only as instructed and in accordance with GDPR.

5. Data retention

License records (email, license key, device activations) are retained for as long as needed to support your purchase — including re-activations and support requests — and are deleted on request (see Section 7). Server log data is retained for up to 30 days for security purposes, then deleted. Property figures you enter into the calculator are never transmitted to us and are not retained by us at all.

6. Cookies

This website does not use cookies for tracking or analytics. Netlify may set a technically necessary cookie for security (e.g. rate limiting), and the calculator uses your browser's local storage (not a cookie) to remember properties you've saved on that device. No consent banner is required as no non-essential cookies are used.

7. Your rights under GDPR

You have the right to:

Access the personal data we hold about you (Art. 15 GDPR)
Rectification of inaccurate data (Art. 16 GDPR)
Erasure of your data ("right to be forgotten") (Art. 17 GDPR)
Restriction of processing (Art. 18 GDPR)
Data portability (Art. 20 GDPR)
Object to processing (Art. 21 GDPR)
Lodge a complaint with a supervisory authority — in Germany, the relevant authority is your state's Datenschutzbeauftragter

To exercise any of these rights over your license/purchase data, email info@renditum.com. We will respond within 30 days. Requests concerning payment data itself should also be directed to Paddle as the processor holding that data.

8. Data transfers outside the EU

Cloudflare and Netlify are US-based companies; Paddle operates internationally. Where personal data is transferred outside the EU/EEA, each processor relies on Standard Contractual Clauses (SCCs) under Art. 46 GDPR as its safeguard for that transfer. See each processor's own Data Processing Agreement (linked above) for the specifics, as processors occasionally update their transfer mechanisms.

9. Changes to this policy

We may update this privacy policy from time to time. The current version is always available at renditum.com/privacy.html. The date of the last update is shown at the top of this page.