Privacy Policy

What data is processed?

When you visit this site, standard server/edge logs are created by our hosting provider for security and operational purposes. These logs may include:

• IP address and approximate location
• Date and time of request
• Requested URL and referrer
• User-Agent (browser/device)
• Error codes and performance metrics

Newsletter

If you subscribe to our newsletter, we process your email address and (if provided) your name in order to send you marketing emails. We use the double opt-in procedure: after registering you will receive an email asking you to confirm your subscription. Only after confirmation will your address be activated. We store your subscription status and metadata (e.g., opt-in time) to document your consent.

Newsletter processing is carried out by our service provider Klaviyo, Inc., 125 Summer St, Boston, MA 02110, USA, as our processor under a Data Processing Agreement including EU Standard Contractual Clauses. Data is transferred to the USA. Data is retained until you withdraw consent or we cease sending our newsletter. You can withdraw consent at any time via the unsubscribe link in each email.

Legal basis: consent (Art. 6(1)(a) GDPR). Provision of your data is voluntary; without it we cannot send the newsletter.

Further information on Klaviyo can be found in their privacy notice.

Analytics (Plausible)

We use Plausible Analytics (Plausible Analytics OÜ, EU) to measure basic website usage in a privacy-friendly, cookie-free way. Plausible does not use cross-site tracking or advertising cookies. We proxy Plausible through our own domain (first-party) to improve reliability and reduce ad-block false negatives; this does not change the cookie-free nature of the analytics.

The data processed may include page URL, referrer, screen size, country (approximate), and event data you trigger on our site (e.g., clicking “Play” on the video). IP addresses are not stored in raw form by Plausible. We use the aggregated reports to understand which content is useful and to improve the site.

Legal basis: legitimate interests (Art. 6(1)(f) GDPR) in understanding usage and improving our services.

More details: Plausible data policy.

Performance Monitoring (Vercel Speed Insights)

We use Vercel Speed Insights to monitor Core Web Vitals and performance in aggregate so we can make the website faster and more reliable. This is separate from analytics and is used solely for performance diagnostics. It does not set marketing cookies.

Legal basis: legitimate interests (Art. 6(1)(f) GDPR) in ensuring performance and stability.

Website Operation (Logs)

We process website log data to provide the site, ensure stability and security, and prevent abuse. Legal bases: legitimate interests (Art. 6(1)(f) GDPR) and applicable Swiss data protection law (FADP).

Video Playback

We use Mux, Inc., 1182 Market St #425, San Francisco, USA, to deliver video playback on our website. For technical reasons, your IP address and related metadata (e.g., device type, resolution, playback events) are transmitted to Mux to stream the video. We have disabled Mux’s analytics and cookie functions, so no tracking cookies are set. Data transfer to the USA is safeguarded by Standard Contractual Clauses.

AI Chat Assistant

We provide a conversational assistant on some pages. The chat is optional and is gated with a short notice. Please avoid entering sensitive information (e.g., payment details, national IDs, health data). We currently use Cloudevo as the provider for this assistant.

What we collect

• The messages you type in the chat and the assistant’s replies.
• Basic technical metadata needed to operate the chat (e.g., timestamp, browser/device type, and approximate IP address as part of standard server/edge logs).
• A strictly-necessary session cookie to enforce short rate limits: m_chat_quota (HTTP-only, SameSite=Lax, Secure in production). This cookie stores a counter and reset timestamp to mitigate abuse and expires roughly 1 minute after the last interaction.
• Local storage keys used on your device to make the chat function smoothly: chatQuota:v3 (client-side mirror of rate limits), chatConsent:v1 (whether you acknowledged the notice), and mbrVideoQuota:v1 (video quota helper if applicable). These are not cookies and are not used for tracking.

What we don’t collect

• No login is required to use the chat; we do not create user accounts for chat.
• No marketing cookies are set by the chat itself. Any site-wide analytics/marketing only runs if you consent to it separately.
• We do not intentionally collect special-category data; please do not submit such information.

Lawful basis

Operating and securing the chat relies on our legitimate interests (GDPR Art. 6(1)(f)). If you provide any optional contact details or if any non-essential cookies were to be used, the basis would be your consent (Art. 6(1)(a)).

Processor

The assistant is provided by our processor Cloudevo AI (Athens Office, 5 Agrafon Street, 5123 Marousi, Attica, Greece; contact: dm@cloudevo.ai) via a custom API endpoint. Data may be processed in the EU and/or transferred internationally subject to appropriate safeguards (e.g., EU Standard Contractual Clauses) as applicable.

Retention

By default we do not persist chat content on our servers beyond transient processing. Hosting providers may retain standard server/edge logs for a limited period per their defaults. If troubleshooting is necessary, we may temporarily retain excerpts of chat logs for up to 90 days and then delete or anonymise them.

Your rights

You may have the rights to access, erase, correct, restrict, or object to processing and to data portability. To exercise these rights for chat data, please use the contact details in the Imprint.

Cookies & Tracking

We do not set marketing/advertising cookies on this site. Plausible operates without cookies. Video playback is configured without analytics cookies. Newsletter signup is handled without website tracking cookies. If we enable additional tracking in the future (e.g., onsite marketing pixels), we will update this notice and, where required, request consent.

Strictly necessary cookies/local storage

• m_chat_quota (HTTP-only cookie): used to enforce short chat rate limits within a 1-minute window. SameSite=Lax, Secure in production; expires when the window elapses.
• chatQuota:v3 (localStorage): client-side mirror of the chat limit to improve UX. Not a cookie; not used for tracking.
• chatConsent:v1 (localStorage): records whether you acknowledged the chat notice. Not a cookie; not used for tracking.
• mbrVideoQuota:v1 (localStorage): helper to limit repeated video plays for performance/abuse prevention. Not a cookie; not used for tracking.

Processors & Hosting

We use the following processors: Vercel (hosting, server/edge logs, and Speed Insights), Plausible (privacy-focused analytics), Klaviyo (newsletter management), and Mux (video streaming). Data may be processed in the EU and/or the US. Where data is transferred internationally, appropriate safeguards (e.g., EU Standard Contractual Clauses) apply according to the providers’ terms.

Retention

Server/edge logs are retained only as long as necessary for the purposes described above and according to our hosting provider’s default retention policies. Newsletter data is retained until you withdraw consent or we stop sending our newsletter. Analytics and performance data are retained according to provider defaults and used in aggregate to improve performance and content.

Your Rights

Subject to applicable law (GDPR/FADP), you may have rights to access, rectify, erase, restrict, object, and data portability. To exercise these rights, please use the contact details provided in the Imprint.

Contact

For privacy inquiries, please contact us using the details in the Imprint.

Changes to this Notice

This privacy notice may be updated as the website expands to reflect new services and features.

Last updated: October 16, 2025