Privacy policy

This is a translation. The German version applies if the two differ.

Last updated: 23 August 2026

1. Who are we?

Mein Spartopf is a cashback service that lets you earn money back when you shop with our partner stores. The service is operated by Monsen AS (Norwegian company registration number 931 063 499), Inger Bang Lunds vei 5, 5059 Bergen, Norway. Monsen AS is the controller under the GDPR for the processing described here. Norway is part of the European Economic Area (EEA), where the GDPR applies unchanged, exactly as it does within the EU. Contact: hallo@meinspartopf.de.

2. What data do we collect?

We process the following personal data:

• Account data: Name and email address. If you sign in with Google, we receive your name and email address from there. We do not ask for an identity document number or a tax identification number.
• Purchase data: Information about purchases you make through our affiliate links: the store, the amount and the time.
• Technical information: IP address, browser, device and operating system, so that the service works and in order to prevent misuse.
• Cookies: We set necessary cookies for login and for affiliate tracking, including a device ID (the “sb_did” cookie, lifetime 180 days).
• Click and account events: When you click through to a partner store, we record the time, the partner store, your IP address, browser information and the device ID. The same happens on registration and on login. The purpose is to be able to assign purchases to the right account, including where you shopped before you registered, so that you receive the cashback you are entitled to, and in order to prevent misuse. We keep this data for no longer than 180 days and process it on the basis of legitimate interest (GDPR art. 6(1)(f)).
• Order confirmations for cashback claims: When you submit a cashback claim, you upload the order confirmation from the store (PDF or image). We use it solely to check your claim and delete it automatically no later than 90 days after the case has been decided.

The payout runs through a payment link from Revolut that you fill in yourself. We therefore neither collect nor store bank details: we never ask for your IBAN.

3. Why do we process this data?

• To deliver the cashback service and to record your purchases.
• To create and manage your account.
• To pay out the cashback you have earned.
• To improve the service and the user experience.
• To meet legal obligations (accounting and tax).

4. Legal basis

We process personal data on the basis of: our contract with you (GDPR art. 6(1)(b)), a legitimate interest (GDPR art. 6(1)(f)), consent where this is required (GDPR art. 6(1)(a)), and a legal obligation where accounting and tax law require it (GDPR art. 6(1)(c)).

5. Who do we share data with?

• Affiliate networks: Adtraction, Addrevenue, Tradedoubler and others, in order to record and confirm purchases.
• Google: if you choose to sign in with Google. Google Ireland Limited handles the sign-in and passes us your name and email address. For its part of the processing, Google is an independent controller.
• Payment providers: Revolut, for paying out cashback.
• Technical providers: operation, hosting and email (see section 8).

We never sell your personal data to third parties.

6. Storage and deletion

We store personal data for as long as you have an active account. If you delete your account, we remove your data within 30 days, apart from data we are legally required to keep (as long as 5 years under the Norwegian accounting rules that apply to Monsen AS). Click and account events containing IP address and device ID are deleted automatically after 180 days.

7. Your rights

You have the right to:

• Access to the data we hold about you.
• Correction of incorrect data.
• Deletion of your data.
• Data portability: to receive your data in a common format.
• Object to processing that rests on a legitimate interest.
• Withdraw a consent, at any time and with effect for the future.
• Lodge a complaint with the data protection supervisory authority responsible for you. Which authority that is depends on where you live, where you work or where the alleged infringement took place; an overview of the German supervisory authorities is available from the Federal Commissioner for Data Protection and Freedom of Information (BfDI).

8. Where the data is processed, and our processors

The data is processed for the most part in Norway and within the EU and the EEA; the exceptions that amount to a transfer to a third country are listed below. Norway is part of the EEA Agreement and subject to the GDPR, so a transfer there is not a third country transfer. We work with the following processors:

• Hostinger: operation and hosting of the platform (EU/Lithuania)
• Resend: transactional email. Resend is based in the USA, so your email address and the content of the message go there. The transfer rests on the EU-US Data Privacy Framework and, in addition, on the European Commission's Standard Contractual Clauses (SCC) with supplementary safeguards.
• Revolut: payouts (EU)
• Google Ireland Limited: sign-in with Google (EU). Google may in turn transfer data to the USA under the Data Privacy Framework.

Mein Spartopf for businesses, the subscription in which a store sends us customer transactions and we act as processor, is not yet offered in Germany. As soon as it starts, we will conclude a data processing agreement as part of the terms of use.

9. Analytics, marketing and tracking

9.1 Statistics (without cookies)

We use Plausible Analytics to measure traffic and use of the service. Plausible collects no personal data, sets no cookies and does not identify you. No data is transferred outside the EEA.

9.2 Ad tracking (only with your consent)

If you give your consent in our consent banner, we may activate ad tracking from platforms such as Meta (Facebook/Instagram), Google Ads, TikTok, Snapchat, Microsoft/Bing, Pinterest, X and Reddit, in order to measure and target advertising. The legal basis is consent (GDPR art. 6(1)(a)). Such platforms may transfer data to the USA on the basis of the EU-US Data Privacy Framework or the Standard Contractual Clauses (SCC). You may change or withdraw your consent at any time, through “Cookies” at the bottom of the page. Without consent, none of it is loaded.

See our cookie page for a full overview of cookies and tracking.

9.3 Affiliate attribution (necessary)

In order to record cashback and credit it to your account, we use affiliate tracking: when you click through to a partner store via Mein Spartopf, a first-party subId (a pseudonymous identifier) is stored with us and with the affiliate network in question (see section 5). This is necessary for the service to work and is processed on the basis of the contract with you (GDPR art. 6(1)(b)). No third-party advertising cookies are set at this step.

10. Contact us

Questions about privacy? Write to us at hallo@meinspartopf.de