Plain-language policy

Privacy

Spare Change contains no analytics, ad trackers, tracking pixels, fingerprinting, Firebase, or third-party sign-in.

Creating an account needs a username and a password. No email address is required, and none is asked for.

Spare Change stores only the account and session data needed to work: a username, a one-way password hash, account security counters, and a hashed session token with an expiry time. It does not put IP addresses, browser details, or activity history in its database.

A recovery address is the one exception, and it is entirely optional. If you add one, it is encrypted before it is stored, it is never shown on your public page, and it is used for nothing but sending you a confirmation link and a password reset link. You can remove it at any time. Sending that mail means our mail provider sees the address.

Signing in sets two cookies: the session, and a device marker that lets this browser keep signing in if someone else trips the failed-login lock on your account. The marker names no account and is not used for anything else. Choosing a light or dark theme sets one more cookie, which holds only that choice.

Choosing a payment method on someone’s page is not recorded. The links are direct, not redirects, so Spare Change never learns which option a supporter picked or whether they went through with it.

Reverse proxies and hosting infrastructure can keep access logs of their own, separately from this application. Ours are disabled.

Payment icons are drawn into the page itself, so showing them contacts no one. They come from the Simple Icons and cryptocurrency-icons collections, and each logo belongs to its owner and only marks which service a link uses. The Monero symbol is by The Monero Project under CC BY-SA 4.0, redrawn in one colour by Simple Icons and shown in white here.