Privacy Policy

The protection of your personal data is important to us. We process personal data only within the framework of applicable law — in particular the Swiss Federal Act on Data Protection (revFADP) and the EU General Data Protection Regulation (GDPR) for users in the EU.

This privacy policy explains what data we collect, how we use it, and what rights you have.

3.1 Newsletter signup

When you sign up for the newsletter, we collect:

• Email address — to send you the monthly newsletter
• Timestamp of signup
• IP address — temporarily for rate limiting (not permanently stored)

Signup uses double opt-in: you receive a confirmation email and are only added to the newsletter list after clicking the confirmation link.

3.2 Server logs

Each request to our website automatically captures:

• IP address (anonymized)
• Date and time
• Page visited
• HTTP status code
• Browser and operating system

These data are used exclusively for technical and security purposes and are deleted after 7 days.

3.3 Analytics

We use OpenPanel as a privacy-friendly analytics tool (cookieless, no personal data collected for advertising). We do not set tracking cookies and do not persistently store IP addresses.

3.4 Planner — optional email entry

After creating your annual plan, you may optionally provide your email address to receive a copy of your plan and later sowing and frost reminders. The address is stored in our database (table email_capture). The reminder function uses a double opt-in process: you will first receive a confirmation email; reminder emails are only sent after you click the confirmation link. We use Resend as our data processor for email delivery (see section 4.1). You may withdraw your consent at any time and request deletion of your address by emailing hallo@erntezeit.app.

3.5 Partner attribution

Via partner links (/partner/<name>) we associate a voluntary email submission with the respective partner. The partner slug is stored in the database as an attribution attribute and is not shared with third parties.

4.1 Resend (email delivery)

For email delivery (confirmation emails, launch notifications) we use Resend (Resend Inc., USA). A Data Processing Agreement (DPA) is in place with Resend. Your email address is transmitted to Resend to enable delivery.

resend.com/legal/privacy-policy

4.2 Infomaniak (hosting)

Our website is hosted by Infomaniak Network SA, 25 Rue Eugène Marziano, 1227 Geneva, Switzerland. All data is stored exclusively in Switzerland.

infomaniak.com/de/datenschutz

4.3 Stripe (payments — from launch)

After launch we will use Stripe for payment processing. Payment data is processed directly by Stripe — we never store credit card data. A DPA is in place with Stripe.

stripe.com/ch/privacy

We process your data on the following legal bases:

• Consent (Art. 6(1)(a) GDPR): newsletter signup
• Contract performance (Art. 6(1)(b) GDPR): use of the service
• Legitimate interest (Art. 6(1)(f) GDPR): security, logs

• Newsletter emails: until unsubscribe
• Server logs: 7 days
• User data (after launch): until account deletion, max. 3 years after last activity

You have the following rights regarding your personal data:

• Access — what data we have stored about you
• Rectification — correct incorrect data
• Erasure — request deletion of your data
• Restriction — restrict processing
• Objection — object to certain processing
• Portability — receive data in a machine-readable format
• Withdrawal — withdraw consent at any time

For any request: hallo@erntezeit.app

You also have the right to lodge a complaint with the competent data protection authority:

Switzerland: Federal Data Protection and Information Commissioner (FDPIC): edoeb.admin.ch

EU: the competent supervisory authority in your EU member state.

Our website uses no tracking cookies. Plausible Analytics works entirely without cookies. No cookie banner is required.

We only set one strictly necessary cookie to remember your language preference (DE/EN/FR/IT). This cookie is not used for tracking and is essential for the use of the website — it may be set without prior consent under GDPR Art. 6(1)(f).

We apply technical and organizational measures to protect your data:

• HTTPS / TLS encryption (mandatory, as .app domains are HSTS-preloaded)
• Hashed and signed tokens (no plain-text passwords)
• Servers in Switzerland (Infomaniak Jelastic, Geneva)
• Regular backups

We reserve the right to adjust this privacy policy as technical or legal requirements change. The current version is always available on this page.