Privacy notice — feasibility test

Operator: Stefan Kienzl
Contact: kienzlstefan@gmail.com

This notice covers the temporary bank feasibility test at huippu.app.

The server processes connection information needed to deliver these pages. Public notices do not set cookies. The protected probe uses a secure, first-party session cookie lasting up to one hour for authorization security. There are no analytics or external page assets. Web access logging is disabled. Hosting infrastructure may process network information.

The account owner may initiate a read-only easybank test through Enable Banking. Bank login happens with the bank/provider. This probe never requests bank login credentials or initiates payments. The server relays the callback and protected pages through an encrypted SSH connection to the owner's Mac. Authorization codes are transient, validated once and not logged.

The Mac contacts Enable Banking directly and stores session/account information and requested transaction snapshots in owner-only local files, outside the project repository. Files are not encrypted by this probe. No bank response files or provider keys are stored on the VPS. Bank transactions are never sent to external AI services. Reports shared for development contain only counts and structural checks, not transaction values, names or identifiers.

Session and snapshot files older than seven days are removed during hourly checks while the probe runs, or on its next command if stopped. The owner can delete them earlier. The provider key and local configuration remain until the owner removes them. Local deletion does not itself revoke provider access; the owner can revoke the current session or manage linked access with the provider/bank. Temporary snapshots are diagnostic evidence, not a backed-up ledger.

Contact the operator about privacy questions or applicable data rights. Enable Banking and the bank present their own information and consent terms when their services are used.