Privacy policy

This policy explains which personal data we process when you visit byrdy.ch, why, and for how long. It follows the Swiss Federal Act on Data Protection (FADP) and, where it applies to you, the EU General Data Protection Regulation (GDPR). The byrdy app has its own privacy policy. This is a translation; if the versions differ, the German version prevails.

1. Controller

2. Hosting, delivery and audience measurement by Cloudflare

The website is delivered through Cloudflare Pages (Cloudflare, Inc., USA). When you open a page, Cloudflare processes technically necessary data: IP address, date and time, the page requested, browser and operating system. This serves secure and fast delivery and protection against attacks. Cloudflare also asks your browser to report network errors while loading the page to Cloudflare (Network Error Logging).

We also use Cloudflare Web Analytics to count how often each page is viewed. For this, every page loads a script from Cloudflare (static.cloudflareinsights.com). It sets no cookies, stores nothing on your device and does not fingerprint your browser.

Legal basis is our legitimate interest in secure operation and in simple audience measurement (Art. 6(1)(f) GDPR). Data may be transferred to the USA; this is based on appropriate safeguards, in particular the EU-US and Swiss-US Data Privacy Framework or standard contractual clauses.

3. Requesting information

When you request information through the form, we process your email address, the selected language, what you are interested in (if you tell us), the part of the page you came from, how often you submitted the form, the time of your request and of our emails, and their delivery status. We do not store your IP address, name or device. We use this data to send you information about byrdy by email and to contact you about access. A copy of your request goes to us so that we can reply.

• Storage: Convex (Convex, Inc., USA), servers in the USA (Amazon Web Services).
• Email delivery: Resend (Resend, Inc., USA), sent through servers in the EU (Ireland). Resend keeps recipients and email content for 30 days.

Legal basis is your consent by submitting the form (Art. 6(1)(a) GDPR) or pre-contractual steps at your request (Art. 6(1)(b) GDPR). Data processing agreements are in place with both providers. The transfer to the USA is based on the European Commission's standard contractual clauses, which are also recognised for Switzerland.

Retention: until you withdraw your consent, at the latest 24 months after our last contact. If you become a customer, the periods in the contract and the statutory retention obligations apply.

4. Analytics with PostHog

Without consent, we count visits anonymously, without cookies and without storing anything in your browser. For this, PostHog (PostHog, Inc.) computes a hash on its server in the EU (Frankfurt) from the IP address, the browser and a random value that changes daily; neither the IP address nor you can be derived from it, and the IP address is discarded afterwards. The country of a visit is determined by our hosting provider Cloudflare from the IP address, which passes on only the country code. This tells us how many visits a page gets, from which country, device and browser, from which website or campaign, which parts of the page are viewed and which buttons are clicked, and whether the page shows errors. It cannot recognise you across days. The legal basis is our legitimate interest in anonymous audience measurement and a working website (Art. 6(1)(f) GDPR); as nothing is stored in or read from your browser, no consent under § 25 TDDDG is required.

With consent: If you click “Accept” in the cookie notice, we additionally use PostHog to understand how the website is used across visits. The data is stored in the EU (Frankfurt) and passed to PostHog through our own server. We record pages viewed, clicks, scrolling, device and browser, the approximate region, and a random identifier stored in a cookie or in your browser’s local storage (name starts withph_). Your IP address is not stored.

We also record the course of your visit (session recording): mouse movements, clicks, scrolling and technical messages from the page. Heatmaps are made from this as well. What you type into form fields is not recorded. We only use the data to improve the website and do not link it to your email address.

Legal basis is your consent (Art. 6(1)(a) GDPR; for visitors from Germany § 25(1) TDDDG). Without consent, only the anonymous count remains: no cookie is set and nothing is recorded. You can change your choice at any time via “Cookie settings” at the bottom of every page. Retention: recordings 30 days, other analytics data at most 12 months.

5. Local storage without consent

Without consent, we only store in your browser’s local storage what the site needs to work: your cookie notice decision, so that we do not ask again on every visit (12 months). This information does not leave your device.

6. Fonts

The website’s fonts (Instrument Serif, Geist, Geist Mono) are hosted on our own server and loaded from there. No connection is made to Google or any other font provider.

7. Links to the App Store and Google Play

If you click one of the store links, you leave our website. Apple’s or Google’s privacy policies apply to their processing of your data.

8. Disclosure

We do not sell data. We only share it with the service providers named above where this is necessary for the respective purpose, or where we are legally required to. We do not make automated individual decisions.

9. Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability and objection, and to withdraw consent with effect for the future. A message toprivacy@byrdy.ch is enough.

You can also lodge a complaint with a supervisory authority: in Switzerland with the Federal Data Protection and Information Commissioner (FDPIC), in the EU with the data protection authority of your country of residence.

10. Changes

We update this policy when our website or the services we use change. The version published here applies.