<link rel="stylesheet" href="styles/fonts.css" /> Skip to content
Plänli
Join the waitlist

Privacy Notice

We only process what we need for the waitlist, and delete it with one click whenever you ask.

Draft – legal review pending

This page is a draft. The highlighted passages marked “TODO” are still open and must be completed and reviewed before launch.

Who is responsible

The controller responsible for processing your personal data on this website is [TODO: company name/address], reachable via the contact details in the legal notice. This notice follows the Swiss Federal Act on Data Protection (FADP) and, where applicable, the EU General Data Protection Regulation (GDPR). [TODO: check whether an EU representative is required]

What we process, why and for how long

Today we only process personal data for the waitlist. The legal basis is your consent (Art. 31 para. 1 FADP, Art. 6 para. 1 lit. a GDPR), which you give by ticking the box in the form and confirm by clicking the confirmation link (double opt-in).

  • Email address, city, companions, language

    Purpose
    Your spot on the waitlist, the confirmation email, the welcome email and a message when Plänli launches. We store the email address in lowercase.
    Retention
    Until you unsubscribe, or until launch if you create an account. Entries you don’t confirm are deleted 7 days after the last sign-up.

  • When you gave your consent and which version of the consent text

    Purpose
    Proof that you consented, and to what.
    Retention
    Together with the entry.

  • Time of sign-up and confirmation

    Purpose
    Order of the waitlist and validity of the confirmation link (48 hours).
    Retention
    Together with the entry.

  • Your invitation code and the code of the person who invited you

    Purpose
    Whoever invites others moves up the list. The ranking never shows email addresses or names.
    Retention
    Together with the entry. If you delete your entry, the link to the person who invited you disappears too.

  • Confirmation link

    Purpose
    Double opt-in. We only store a hash of the link, never the link itself.
    Retention
    Until confirmed, 48 hours at most.

  • Email address and content of our emails at the email delivery service

    Purpose
    Delivery of the confirmation and welcome emails. No marketing, and we measure neither opens nor clicks.
    Retention
    According to the delivery service’s retention periods. [TODO: check the retention period of the Brevo logs]

What we don’t store

The application stores no IP addresses and no details about your browser. Rate limiting runs in memory and is never written to disk. We use no cookies, no ad networks and no trackers. [TODO: check whether the reverse proxy or hosting writes access logs containing IP addresses, and for how long]

Who receives the data

  • Hosting: Hetzner, servers in the EU. [TODO: confirm location, company and data processing agreement]
  • Email delivery: Brevo (Brevo SAS, Paris, France – EU), with tracking switched off. [TODO: conclude and review Brevo’s data processing agreement (DPA)]

There are no other recipients. We don’t sell data. This website loads no fonts, scripts or images from third parties: your browser only talks to us.

Cookies, local storage and analytics

We set no cookies. Your browser locally stores your choice between light and dark design and, for as long as the tab is open, an invitation code from a link you opened. Neither contains any information about you.

If we measure how the website is used, we do so with self-hosted software that uses no cookies (Umami) and doesn’t recognise individuals. [TODO: confirm whether and from when it is active; then add the purpose and the option to object]

Your rights

  • Access: You can find out what data we hold about you.
  • Correction: We correct inaccurate information.
  • Erasure (Art. 32 FADP, Art. 17 GDPR): Every email from us contains an unsubscribe link. One click on “Delete entry” removes your entry permanently. This can’t be undone. All we keep is an anonymous count.
  • Portability: You can ask for your data in a common format.
  • Withdrawal: You can withdraw your consent at any time. It then applies from that point on.

Write to us for anything the unsubscribe link doesn’t cover: the address is in the legal notice. You can also complain to the supervisory authority, in Switzerland the Federal Data Protection and Information Commissioner (FDPIC)(opens in a new tab).

Security

The connection to this website is encrypted. Confirmation and unsubscribe links can’t be guessed, and a link alone changes nothing: only your click on the button confirms or deletes. That way email scanners can neither confirm nor delete your entry.

Changes

Last updated: [TODO: date]. If what we process changes, we will update this notice before the change takes effect.