Privacy Policy

Protecting your personal data matters to us. We process your data exclusively on the basis of legal provisions and according to the principles of data minimization and purpose limitation.

Last updated: June 2026

Data protection

We process your personal data only according to the principles of the GDPR and the Swiss Federal Act on Data Protection (FADP). Our practices comply with current European and Swiss data-protection standards.

Data collection

We collect technically necessary server log files (IP address, time, browser type), the content of any contact you make (name, email, message), and technically necessary and optional cookies.

Web analytics

We use the self-hosted, cookieless analytics software Umami. It sets no cookies, stores no IP addresses and builds no personal profiles — only anonymous page views and referrer sources are measured. The data never leaves our own infrastructure. If you prefer not to be counted: Analytics opt-out.

Push notifications (optional)

For the news app (analytikdata.ch/ticker) we offer optional push notifications via the open Web Push standard. The service runs on our own server in Switzerland/the EU. We store only the anonymous push address (endpoint URL) generated by your browser, the associated encryption keys, your topic selection and a timestamp — no IP addresses, no browser identifiers, no email addresses. Notification contents are transmitted end-to-end encrypted (RFC 8291); for technical reasons, delivery goes through the push service of your browser vendor (e.g. Mozilla, Google or Apple), which cannot read the encrypted contents. When you unsubscribe, or as soon as a push address is no longer reachable, we delete the record. To manage e-mail subscriptions we send, on request, a short-lived management link by e-mail; the link merely proves access to the mailbox in question. The optional "remember this device" feature stores a random token in your browser's localStorage (no cookie, no tracking; revocable in the app or by deleting site data) — our server keeps only a hash of the token, the e-mail address and timestamps; the record is deleted on revocation or after 180 days without use.

Your rights

Under the GDPR and FADP you have the right to access, rectification, erasure, restriction of processing, data portability and objection.

Contact for data-protection questions

For any data-protection questions you can reach us anytime: mr@anadat.ch.