← Back

Privacy Policy

1. Controller

Cedric Neuhaus (sole proprietorship, Switzerland)
Email: [email protected]

As the controller is established in Switzerland, this policy is primarily governed by the Swiss Federal Act on Data Protection (FADP / nDSG). Because we also have visitors and newsletter subscribers in the EU/EEA and UK, we additionally apply the EU General Data Protection Regulation (GDPR) and UK GDPR where they apply.

2. What data we collect

If you sign up for our newsletter, we collect:

  • Email address
  • Time of signup and confirmation
  • Technical access data (IP address, browser type) for spam prevention

3. Purpose of processing

Your email address is used exclusively to send the newsletter. Under the Swiss FADP, processing is permitted as long as our data protection principles (Art. 6 nDSG) are respected and your consent is given; where the GDPR applies, the legal basis is additionally your consent (Art. 6(1)(a) GDPR).

4. Double opt-in

We use the double opt-in procedure: after signing up, you receive a confirmation email. Your email address is only added to our list after you click the confirmation link.

5. Service providers & international transfers

We use Resend (Resend Inc., USA) to send emails. Data is processed on servers in the EU and/or USA. Resend is certified under the EU-US Data Privacy Framework.

Newsletter data and the usage statistics described in section 8a are stored in a database hosted by Railway (Railway Corp., USA).

Where personal data is transferred outside Switzerland or the EU/EEA, we rely on an appropriate safeguard — such as a provider's certification under the Swiss-U.S. Data Privacy Framework or the EU-U.S. Data Privacy Framework, or Standard Contractual Clauses — so that your data receives a level of protection equivalent to Swiss/EU law. You may request details of the safeguard applied to a specific transfer by contacting us.

6. Your rights

If you are in Switzerland, you have the right to information, rectification, erasure, and restriction of processing under Art. 25 ff. nDSG, and may lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC / EDÖB), edoeb.admin.ch.

If the GDPR applies to you (EU/EEA/UK), you additionally have the right to:

  • Access your stored data (Art. 15 GDPR)
  • Rectify incorrect data (Art. 16 GDPR)
  • Erase your data (Art. 17 GDPR)
  • Object to processing (Art. 21 GDPR)
  • Withdraw your consent at any time
  • Lodge a complaint with your local supervisory authority

To unsubscribe, click the unsubscribe link in any newsletter email, or write to: [email protected]

6a. California residents (CCPA/CPRA)

Given the small scale of this newsletter, the CCPA/CPRA thresholds are unlikely to apply to us. If you are a California resident and would still like to know what data we hold about you, have it corrected, or have it deleted, contact us at [email protected] and we will handle your request the same way we would under GDPR. We do not sell or share personal information.

7. Cookies

This website uses only strictly necessary functional cookies. No tracking or marketing cookies are used, no profiling takes place, and no personal data is processed for advertising purposes. Consent is not required under Art. 6(1)(f) GDPR.

In detail:

  • __cf_bm, cf_clearance — set by Cloudflare for bot protection and security. Lifetime: up to 30 days. Strictly necessary.
  • lp_session — set upon successful security verification (Cloudflare Turnstile) and stores only a signed, short-lived session token (60 minutes). No personal data, no tracking function.

8. Web analytics

We use Cloudflare Web Analytics for traffic measurement. This service operates entirely cookie-free and does not create individual user profiles. Only aggregated statistics are collected (page views, browser type, country). More information: Cloudflare Web Analytics.

8a. Our own reach measurement

In addition, we record a small amount of usage data ourselves, so we can see how well this page works. For each visit we store:

  • which profile page was opened
  • how long the visit lasted
  • which category of link was clicked (for example "instagram" or "hub")
  • the date and time

We do not store your IP address, browser type, device identifier or any cookie together with this data, and it is not linked to your newsletter subscription. A random, temporary visit ID is held in your browser during the visit only, purely so the duration can be attached to the right visit; it is discarded when you leave and cannot be traced back to you afterwards.

This data is stored in our database at Railway (Railway Corp., USA). Under the Swiss FADP this is covered by our data protection principles (Art. 6 nDSG); where the GDPR applies, the legal basis is our legitimate interest in understanding and improving the reach of our own page (Art. 6(1)(f) GDPR).

9. Hosting

This website is hosted via Cloudflare Pages (Cloudflare Inc., USA). Cloudflare may process technical access data (IP addresses, timestamps). More information: Cloudflare Privacy Policy.

10. Changes

We reserve the right to update this privacy policy as needed. The version published on this page at any given time is authoritative.

Operator details: see our Imprint. Rules for using this site: see our Terms of Use.

Last updated: August 2026