Privacy Policy

The data controller within the meaning of the Swiss Federal Act on Data Protection (FADP) and the EU General Data Protection Regulation (GDPR) is:

This Privacy Policy is governed by:

• the Swiss Federal Act on Data Protection (FADP)
• the EU General Data Protection Regulation (GDPR), insofar as it applies to users located in the European Union

We process the following categories of personal data:

We process personal data for the following purposes and legal bases:

• Contract performance (Art. 6(1)(b) GDPR): To create and manage user accounts, provide our services, process payments and subscriptions
• Legal obligations (Art. 6(1)(c) GDPR): To comply with accounting, tax and regulatory requirements
• Legitimate interests (Art. 6(1)(f) GDPR): To ensure security, prevent fraud, improve and maintain our services
• Consent (Art. 6(1)(a) GDPR): For optional cookies, analytics and non-essential features, where applicable

We use cookies and similar technologies to operate and improve our website.

• Necessary cookies: Required for core functionality such as authentication, security and language preferences. Legal basis: legitimate interest.
• Optional cookies: Used for analytics and service improvement. Legal basis: consent.
• Newsletter reach measurement: our newsletter emails may contain a tracking pixel and links redirected via our own domain, allowing us to measure opens and clicks and improve the content. We store no IP addresses for this purpose, only a salted hash; automated retrievals by spam filters, link scanners and privacy proxies are filtered out. Legal basis: legitimate interest. You can object at any time by switching the newsletter off in your settings; this ends both the mailings and the measurement.

You can manage your cookie preferences at any time via our cookie banner or browser settings.

Payments are processed by Stripe. Payment data is transmitted directly to Stripe and processed on their systems. We do not store credit card numbers or bank account details.

Stripe may process personal data as an independent data controller. Further information can be found in Stripe's Privacy Policy.

We may share personal data with trusted service providers acting as data processors, including:

• Hosting and infrastructure providers
• Payment processors
• Email and communication services
• Analytics and error monitoring services

All processors are contractually bound to process data only on our instructions and in compliance with applicable data protection laws.

Some service providers, including Stripe, may process data outside Switzerland or the European Union. Where such transfers occur, we ensure appropriate safeguards, in particular:

• EU Standard Contractual Clauses
• Adequacy decisions where applicable

We retain personal data only for as long as necessary for the purposes described in this Privacy Policy or as required by law.

Account data is stored for the duration of the active account. Upon account deletion, personal data is deleted or anonymised unless legal retention obligations apply.

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse or alteration.

Under the GDPR and the Swiss FADP, you have the following rights:

• Right of access to your personal data
• Right to rectification of inaccurate data
• Right to erasure of your personal data
• Right to restriction of processing
• Right to data portability
• Right to object to processing
• Right to withdraw consent at any time, without affecting the lawfulness of prior processing

You may exercise most rights directly via your account settings.

You have the right to lodge a complaint with a supervisory authority.

In Switzerland, the competent authority is the Federal Data Protection and Information Commissioner (FDPIC).

EU users may contact their local data protection authority.

For questions regarding data protection or to exercise your rights, please contact:

[email protected]