Privacy Policy

The protection of your personal data is important to us. We process personal data only within the framework of applicable law — in particular the Swiss Federal Act on Data Protection (revFADP) and the EU General Data Protection Regulation (GDPR) for users in the EU.

This privacy policy explains what data we collect, how we use it, and what rights you have.

3.1 Waitlist signup

When you sign up for the waitlist, we collect:

• Email address — to notify you at launch
• Timestamp of signup
• IP address — temporarily for rate limiting (not permanently stored)

Signup uses double opt-in: you receive a confirmation email and are only added to the waitlist after clicking the confirmation link.

3.2 Server logs

Each request to our website automatically captures:

• IP address (anonymized)
• Date and time
• Page visited
• HTTP status code
• Browser and operating system

These data are used exclusively for technical and security purposes and are deleted after 7 days.

3.3 Analytics

We currently do not use any analytics tools on the waitlist page. Starting at launch, we plan to deploy a privacy-friendly analytics tool (Plausible Analytics or an equivalent cookieless solution). We will update this privacy policy as soon as tracking is active. In any case, we will never use tracking cookies, store IP addresses, or collect personal data for advertising.

4.1 Resend (email delivery)

For email delivery (confirmation emails, launch notifications) we use Resend (Resend Inc., USA). A Data Processing Agreement (DPA) is in place with Resend. Your email address is transmitted to Resend to enable delivery.

resend.com/legal/privacy-policy

4.2 Infomaniak (hosting)

Our website is hosted by Infomaniak Network SA, 25 Rue Eugène Marziano, 1227 Geneva, Switzerland. All data is stored exclusively in Switzerland.

infomaniak.com/de/datenschutz

4.3 Stripe (payments — from launch)

After launch we will use Stripe for payment processing. Payment data is processed directly by Stripe — we never store credit card data. A DPA is in place with Stripe.

stripe.com/ch/privacy

We process your data on the following legal bases:

• Consent (Art. 6(1)(a) GDPR): waitlist signup
• Contract performance (Art. 6(1)(b) GDPR): use of the service
• Legitimate interest (Art. 6(1)(f) GDPR): security, logs

• Waitlist emails: until launch or unsubscribe
• Server logs: 7 days
• User data (after launch): until account deletion, max. 3 years after last activity

You have the following rights regarding your personal data:

• Access — what data we have stored about you
• Rectification — correct incorrect data
• Erasure — request deletion of your data
• Restriction — restrict processing
• Objection — object to certain processing
• Portability — receive data in a machine-readable format
• Withdrawal — withdraw consent at any time

For any request: hallo@erntezeit.app

You also have the right to lodge a complaint with the competent data protection authority:

Switzerland: Federal Data Protection and Information Commissioner (FDPIC): edoeb.admin.ch

EU: the competent supervisory authority in your EU member state.

Our website uses no tracking cookies. Plausible Analytics works entirely without cookies. No cookie banner is required.

We only set one strictly necessary cookie to remember your language preference (DE/EN/FR/IT). This cookie is not used for tracking and is essential for the use of the website — it may be set without prior consent under GDPR Art. 6(1)(f).

We apply technical and organizational measures to protect your data:

• HTTPS / TLS encryption (mandatory, as .app domains are HSTS-preloaded)
• Hashed and signed tokens (no plain-text passwords)
• Servers in Switzerland (Infomaniak Jelastic, Geneva)
• Regular backups

We reserve the right to adjust this privacy policy as technical or legal requirements change. The current version is always available on this page.