Privacy Policy

1. Who we are

Home Budget Manager is a private family expense tracking platform operated by Comweb Services, hosted at yrsmail.com ("we", "us", "our"). This platform is provided as a private service and is not a public commercial product.

2. What data we collect

Account information

• Full name and email address of the family account holder and family members
• Home address (house number, street, city, postcode, country) provided at registration
• Encrypted password (we never store passwords in plain text)
• Currency preference

Expense data

• Expense entries including date, category, amount, description, and optional receipt reference
• This data is entered voluntarily by you and belongs entirely to your family

Technical data

• Login history including IP address, approximate location (city/country), browser type, and login timestamp
• This data is collected for security purposes only

3. How we use your data

• To provide and operate your family budget account
• To send account-related emails (activation, password reset, expense reports)
• To protect your account through brute-force login detection
• To generate reports and exports that you request

We do not use your data for advertising, marketing, or any commercial purpose. We do not sell, share, or transfer your data to any third party.

4. Data storage and security

All data is stored on servers hosted in Ireland. We implement the following security measures:

• All passwords are hashed using bcrypt (cost factor 12) — they are never stored in plain text
• All connections use HTTPS/TLS encryption
• Session cookies are HttpOnly, Secure, and SameSite=Lax
• Brute-force login protection blocks repeated failed attempts
• Regular database backups are taken and stored securely

5. Your rights under GDPR

As a data subject under GDPR, you have the following rights:

• Right of access — you can request a copy of all data we hold about you
• Right to rectification — you can correct inaccurate data via your account settings
• Right to erasure — you can request deletion of your account and all associated data
• Right to data portability — you can export your expense data at any time via the Reports section
• Right to object — you can object to any processing of your personal data

To exercise any of these rights, contact us at: admin@yrsmail.com

6. Data retention

We retain your data for as long as your account is active. If you request account deletion, all personal data and expense records will be permanently removed within 30 days. Login history logs are retained for a maximum of 12 months for security purposes.

7. Cookies

We use only one cookie — a session cookie named PHPSESSID — which is strictly necessary for the platform to function. It is not used for tracking or analytics. No third-party cookies are used.

8. Third-party services

We use the following limited third-party services:

• Google Fonts — for typography (fonts are loaded from Google's CDN). Google may log your IP address when fonts are requested. See Google's Privacy Policy.
• ip-api.com — used to look up the approximate location of login attempts for security logging only. No personal data is sent to this service.

9. Contact

If you have any questions about this privacy policy or how we handle your data, please contact:

Comweb Services
Email: admin@yrsmail.com
Platform: yrsmail.com/budget

You also have the right to lodge a complaint with the Data Protection Commission of Ireland:
www.dataprotection.ie