Legal

Privacy Policy

Last updated 2026-04-21

This Privacy Policy explains how Happenings Group A/S(“we”, “us”, “our”) collects, uses, and protects personal data when you use midrate.site(the “Service”). We act as the data controller for personal data processed through the Service.

1. Data we collect

Anonymous use.You can use midrate without an account. We store your selected amount, base currency, target currencies, and chart range in the URL and in your browser's localStorage so your view persists across sessions. This data never leaves your browser unless you sign in.

Account data. If you sign in, we store your email address and basic profile information from your authentication provider (e.g. Google). We use this to authenticate you and to associate your saved amounts with your account.

Tracked amounts. When you save an amount, we store the label, amount, base currency, target list, and the exchange rates at the moment of saving.

Technical data. Our hosting provider may log IP addresses and request metadata for security and operational purposes. We do not use advertising trackers.

2. How we use data

  • to provide and maintain the Service;
  • to authenticate you and secure your account;
  • to persist your preferences and tracked amounts;
  • to diagnose issues and prevent abuse;
  • to comply with legal obligations.

3. Legal basis (GDPR)

We process personal data under Article 6 GDPR on the basis of (a) performance of a contract — where processing is necessary to provide the Service you have signed up for; and (b) legitimate interests — to keep the Service secure and operational.

4. Third-party services

midrate relies on third parties to function:

  • Frankfurter (frankfurter.dev) and CoinGecko (coingecko.com) — we call these from our servers; your browser does not contact them directly.
  • Authentication providers (e.g. Google) — if you sign in with one, you are subject to their privacy policy.
  • Hosting & database providers — used to run the Service under appropriate data-processing agreements.

5. Cookies and local storage

We use a session cookie to keep you signed in and localStorage to remember your last view. We do not use advertising or cross-site tracking cookies.

6. Retention

Account data is kept for as long as your account is active. You can delete your account at any time — tracked amounts are deleted with it. Backups are purged on a routine schedule.

7. Your rights

Under the GDPR you have the right to access, rectify, or erase your personal data, to restrict or object to processing, and to data portability. You may also lodge a complaint with the Danish Data Protection Agency (Datatilsynet).

8. Security

We take reasonable technical and organisational measures to protect your data. No system is perfectly secure — please choose a strong password on your authentication provider and sign out on shared devices.

9. Changes

We may update this Policy to reflect changes to the Service or the law. Material changes will be posted on this page with a new “Last updated” date.

10. Contact

For privacy questions or to exercise your rights, contact Happenings Group A/S. The data controller is Happenings Group A/S, registered in Denmark. See Terms of Service for general legal information.