Information pursuant to Section 5 of the Austrian E-Commerce Act (ECG) and Section 25 of the Austrian Media Act.
Lukas Adelbrecht
Mitterlingweg 3
9520 Sattendorf
Austria
Email: info@tanktrend.eu
VAT ID: ATU74375605
Media owner: Lukas Adelbrecht
Place of residence: Sattendorf, Austria
Purpose: Operation of an online service providing information about fuel prices, driving routes and estimated fuelling costs.
Editorial policy: Neutral and transparent information about publicly available fuel prices and non-binding price and cost comparisons.
Lukas Adelbrecht, Mitterlingweg 3, 9520 Sattendorf, Austria
TankTrend displays fuel prices supplied by the following organisations. Attribution and licence notices are provided as required by the respective licences.
Germany — Tankerkönig
Austria — E-Control
Maps, geocoding & market data
The seven-day forecast is an automated estimate based on Brent crude-oil movements, public news and known tax dates. It is not a guarantee of future prices. Geopolitical events cannot be predicted. All information is supplied without warranty.
Contracting party: Lukas Adelbrecht, Mitterlingweg 3, 9520 Sattendorf, Austria.
TankTrend Premium unlocks the features identified as Premium in the app. A free Premium trial ends automatically and does not convert into a paid subscription. A paid subscription cannot be purchased while free Premium access is active.
Prices: €0.99 per month or €5.99 per year. Prices are total prices including VAT. TankTrend charges no additional payment fee.
The subscription starts after successful payment and automatically renews for another month or year until cancelled. The profile shows the plan, status, and next renewal or end date. The contract is concluded when payment is confirmed in Stripe Checkout; an electronic confirmation follows.
Stripe processes payments. TankTrend does not store full card or bank details.
Cancellation: Cancel at any time in the TankTrend profile or Stripe Customer Portal. Cancellation takes effect at the end of the paid billing period and Premium remains active until then. Ordinary cancellation does not result in a partial refund. Statutory refund and withdrawal rights remain unaffected.
Deleting the TankTrend account immediately terminates its connected Stripe subscription and Premium access. The unused period is not refunded except where required by law. TankTrend displays this warning before account deletion.
Uninterrupted availability cannot be guaranteed. Material price or contract changes affecting future renewals will be communicated in advance; paid periods will not be repriced retrospectively.
Austrian law applies. Mandatory consumer protections and statutory jurisdiction at a consumer's residence remain unaffected. TankTrend does not voluntarily participate in an out-of-court consumer dispute-resolution procedure.
Consumers may withdraw from the Premium contract within 14 days after its conclusion without giving a reason. A clear statement by email to info@tanktrend.eu or by post to Lukas Adelbrecht, Mitterlingweg 3, 9520 Sattendorf, Austria is sufficient.
Following a valid withdrawal, all subscription payments received will be refunded through the original payment method no later than 14 days after receipt of the withdrawal. Premium access ends with the reversal.
Model withdrawal form: “I hereby withdraw from my contract for TankTrend Premium. Ordered on: ____. Name: ____. Address: ____. TankTrend account email: ____. Date: ____. Signature (only for a paper notice): ____.”
Location data
If you allow browser location access or enter a postcode/place, coordinates are sent to the TankTrend server to find nearby stations. No personal movement profile is created. Search parameters, including coordinates, are not written to the access log. Processing is necessary to provide the requested nearby search and securely operate the service under Article 6(1)(f) GDPR.
For a live search, only the TankTrend server sends the coordinates and selected fuel to Tankerkönig or E-Control. Those providers receive the TankTrend server's IP address, not the user's IP address or identity.
Server logs
Website and API requests briefly log technically necessary data: IP address, time, HTTP method, requested path without query parameters, response status, transferred byte count and user agent. Coordinates, activation tokens and password-reset tokens are not logged. Logs are used only for technical operation and abuse prevention under Article 6(1)(f) GDPR.
Retention: Logs are rotated by size. Each service retains no more than five files of up to 10 MB; older entries are overwritten automatically. The actual time period depends on traffic. Logs are not analysed for marketing or profiling.
Backups
Local compressed database backups are created daily and automatically deleted after 14 days. Full-server Proxmox backups run Monday, Wednesday and Friday; the latest three successful backups are retained. Log data contained in a backup may remain until that backup is routinely replaced. Backups are used solely for recovery from technical failure, data loss or security incidents.
User accounts and synchronised vehicles
An account is optional. TankTrend stores a random internal identifier, email address, non-reversible password hash, account and Premium status, preferred language, tutorial completion status, and creation/change timestamps. Passwords are never stored in plain text. Sessions use random tokens stored server-side only as hashes and expire after no more than 30 days.
Optional two-factor authentication can be enabled with an authenticator app. Its TOTP secret is stored encrypted. Recovery codes are stored only as cryptographic hashes and can each be used once. Short-lived login challenges expire after five minutes; five failed attempts require a fresh sign-in. Two-factor data is erased when the feature is disabled or the account is deleted.
Password recovery uses a random single-use token stored only as a hash. It expires after one hour and is deleted after use or expiry. The email address is sent only to the configured mail server to deliver the requested recovery link.
Premium users may optionally confirm a refuelling receipt using the camera or an image. The image is encrypted in transit, processed on TankTrend's own servers and discarded immediately afterwards; it is neither stored permanently nor sent to an external image-recognition service. Only the recognised details confirmed by the user (station and address, date, litres, unit price and total), the confirmation status and a non-reversible fingerprint used to detect duplicate receipts are retained. They are deleted with the refuelling entry; a confirmation not attached to a refuelling expires after 30 minutes.
Where email confirmation is enabled, registration creates a random activation token stored only as a hash. It expires after 24 hours and becomes invalid after confirmation. The email address is sent only to deliver the activation link. Unconfirmed accounts are automatically deleted seven days after registration, immediately followed by a deletion confirmation email.
Accounts may synchronise one vehicle profile; Premium users may synchronise up to five. Stored data includes vehicle name, fuel, tank size, consumption, current fuel level and, where selected, a vehicle-catalogue reference. It is used only for cross-device access and cost calculations. Account deletion removes sessions, permissions, synchronised vehicles and all other account-linked data.
Users may save one preferred address including display name, country, coordinates and enabled status. If automatic search is enabled, it becomes the first search when TankTrend opens. It can be disabled or deleted in the profile. Other searches are not stored as account search history.
Premium users may save up to 25 favourite stations. Station ID, country, display name, address and coordinates are linked to the account. No search history is stored. Favourites can be removed at any time and are deleted with the account. An optional target price and fuel may be stored for a price alert and checked against the latest available station price.
For optional push notifications, the browser-issued push endpoint and public encryption keys are linked to the account. Area alerts additionally store a label, centre point, country, radius, fuel and target price; up to five may be created. Alert types can be disabled in the profile. Encrypted messages are sent to the browser or operating system push service, which processes the endpoint and technical connection data; notification text may contain station name and current price. Invalid endpoints and all settings are deleted no later than account deletion.
If a Premium user selects “I'll wait” after a falling-price forecast, the decision is stored with vehicle, station ID and name, country, fuel, starting price and distance, distance source, forecast price and target date. It remains active for 72 hours. If the selected station's price measurably falls, one push notification may be sent where enabled. If a refuelling is later confirmed, the decision may be linked to calculate forecast-related savings. Decision data is deleted after no more than 90 days, when the related vehicle is deleted, or when the account is deleted.
Premium users may voluntarily confirm refuelling to calculate estimated savings. Stored data includes time, vehicle and station labels, litres, paid price, reference station and price, distances, calculated travel costs and calculation version. This is an estimate compared with the nearest suitable station at search time, not proof of actual savings. Individual entries can be deleted. Raw data is deleted after 24 months; only a monthly total and transaction count then remain. Account deletion also removes these totals.
Minimal visitor statistics, no advertising
Payments and subscriptions through Stripe
When purchasing or managing Premium, the browser is redirected directly to Stripe. Stripe processes data including name, email address, billing address, payment details, amount, tax information, IP address, device information and fraud-prevention data. TankTrend does not receive full card or bank details. It receives data including Stripe customer and subscription IDs, billing interval, payment and subscription status, and renewal, end and cancellation dates.
Processing is necessary to perform the contract under Article 6(1)(b) GDPR, comply with tax and accounting duties under Article 6(1)(c), and, where necessary, prevent fraud on the basis of legitimate interests under Article 6(1)(f). Stripe group companies and their payment and infrastructure partners may process data outside the EEA using the applicable legal transfer mechanisms. See the Stripe Privacy Center.
Payment and billing records are retained for statutory tax and record-keeping periods. Operational account-linked subscription data is erased or anonymised when no longer required; records that must legally be retained remain unaffected.
Integrated third-party services
The following external services are contacted directly by the browser when the map is loaded or used. They receive in particular the IP address, time and technical browser information:
The service provider named above is the controller under the GDPR. Subject to statutory requirements, you have rights of access, rectification, erasure, restriction, data portability and objection. Use the contact details above. You may also complain to the Austrian Data Protection Authority.
Automated recommendations
TankTrend calculates non-binding station and price recommendations using price, distance and optional vehicle data stored in the browser. These calculations do not constitute automated decision-making with legal or similarly significant effects under Article 22 GDPR.
Content is prepared with care but without warranty as to accuracy, completeness or timeliness, particularly for price and forecast data. Operators of linked external sites are responsible for their content.