Privacy Policy

Last updated: 7 June 2026

1. Who runs this

Slantkoll is a self-hosted personal finance tool. You can run your own instance and this policy covers the instance I run at slantkoll.se. I'm its operator, and the data controller for the data described here. You can reach me at kontakt@slantkoll.se.

2. What this covers

This explains what data I handle when you connect a bank account, why I handle it, the legal basis, and your rights under the EU General Data Protection Regulation (GDPR).

3. The data I handle

When you link a bank account, I handle:

• your name and the details of the accounts you pick, such as account name and IBAN;
• account balances; and
• transactions: amount, currency, date, counterparty, and any reference or description.

I only touch the accounts you pick during the connection flow, and only to read them. I never move money. I never see or store your bank login.

4. How I get your bank data

Your bank data comes through Enable Banking. They're a licensed account information service provider (AISP), regulated under the EU Payment Services Directive (PSD2). You log in at your own bank and approve the access before anything is shared. Enable Banking runs that regulated access under its own licence, so it acts as its own data controller for it, not on my behalf. Their own privacy notice covers that handling.

5. Why I handle it, and the legal basis

I use the data for one thing: to show you your own finances. Balances, categorized transactions, net worth over time. The legal basis is your consent (GDPR Art. 6(1)(a)). I don't use your financial data for ads, profiling, or anything else.

6. Consent, and taking it back

A bank connection lasts a limited time, usually up to 180 days. After that you renew it. You can withdraw consent whenever you want: remove the connection in Slantkoll, and revoke access in your bank if it offers that. Withdrawing stops any further access. It doesn't undo processing that already happened.

7. How long I keep it

I keep your financial data while you use Slantkoll. Delete a connection or your account and the data goes with it. You can ask me to delete it at any time.

8. Where it lives, and how it's protected

Data for this instance sits on self-hosted servers in the EU. Access is limited to me and protected by access controls. I keep only the data I need to run it.

9. Who I share it with

I don't sell your data. I don't share it for marketing. The only third party that touches your bank data is Enable Banking, as the regulated AISP above.

10. Your rights

Under the GDPR you can:

• see the data I hold about you;
• correct it if it's wrong;
• have it erased;
• get it in a portable format;
• restrict or object to how it's used; and
• withdraw consent at any time.

To do any of these, email kontakt@slantkoll.se.

11. Cookies

The site sets one session cookie, needed for it to work. No ad cookies, no third-party tracking.

12. Changes

I may update this policy. If something material changes, I'll move the "Last updated" date above.

13. Contact

Questions about this policy or your data: kontakt@slantkoll.se.