Privacy Policy

This privacy policy explains how personal data is collected and processed when using this application, in compliance with the EU General Data Protection Regulation (GDPR / DSGVO) and the Swiss Federal Act on Data Protection (FADP / nDSG).

Data Controller

The data controller is the same as the one in the imprint.

Web Hosting

This application is hosted on Vercel Inc. (340 S Lemon Ave #4133, Walnut, CA 91789, USA). When you access the app, Vercel automatically collects standard technical infrastructure logs (e.g., IP address, browser type, operating system, requested page, and timestamp).

  • Purpose: Ensuring network security, server stability, and delivering the web application.
  • Legal Basis: Legitimate interest (Art. 6(1)(f) GDPR; Art. 31 Swiss FADP).
  • Data Transfer: Vercel processes data internationally subject to Standard Contractual Clauses (SCCs) to guarantee compliance with Swiss and EU data protection standards.

Database and Authentication

Application backend data and user authentication are managed via Supabase Inc. (835 Howard St, San Francisco, CA 94103, USA).

  • Data Collected: Account credentials (such as email address and hashed passwords) and data directly created or submitted by you while using the app.
  • Purpose: To manage user registration, maintain security, and store functional application data.
  • Legal Basis: Performance of a contract / service provision (Art. 6(1)(b) GDPR; Art. 31 Swiss FADP).
  • Data Transfer: Secured via Standard Contractual Clauses (SCCs) for international data transfer compliance.

Cookies and Local Storage

  • Zero Tracking: This app does not use any analytics services (e.g., Google Analytics), advertising networks, tracking pixels, or user behavior monitoring.
  • Essential Cookies Only: We strictly process functional cookies and local storage items (e.g., authentication tokens provided by Supabase) required for you to log in and navigate the app securely. Because these are strictly necessary for core service functionality, separate user cookie consent banners are not required.

Your Rights

Under Swiss data protection law (nDSG) and the GDPR, you hold the following rights regarding your personal data:

  • Access: Request a copy of the personal data stored about you.
  • Rectification: Request corrections to any inaccurate or incomplete personal data.
  • Erasure: Request the deletion of your personal data when it is no longer needed.
  • Portability: Receive your personal data in a structured, commonly used format.
  • Objection: Object to processing based on legitimate interests.

To exercise these rights, please contact the Data Controller. Swiss users have the right to lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC / EDÖB). EU users may lodge complaints with their respective regional supervisory authority.