Privacy

Who is responsible

The party responsible for processing your data is Fürst Informatik GmbH, Max-Högger-Strasse 6, 8048 Zürich. We answer questions about data protection at fuerscht@gmail.com.

If you only read

When you open a page, our hosting provider processes the usual details of every request: IP address, time, requested address and browser identifier. We need these server logs for operation and troubleshooting; they are deleted after 30 days.

schwur.ch does not use any analytics, advertising or tracking services. schwur.ch serves its fonts itself; your browser does not request them from any third party.

A single cookie

schwur.ch sets only one cookie, ‘schwur_session’, and only when you open a form for signing in or for your account, or when you sign in. It protects these forms against forged requests and keeps you signed in. It is technically necessary and contains no advertising identifier.

If you do not sign in, it expires when you close your browser. After you sign in, it expires no later than 14 days after your last visit, and immediately when you sign out.

If you have an account

For your account we store:

• your email address and, if you provide it, your name
• your password only as an irreversible hash (scrypt), never the password itself
• if you sign in with Google, your Google ID
• when you confirmed your address and when you last signed in
• failed sign-in attempts; after five failed attempts we temporarily lock the account
• the language in which we write to you, and your role, for example whether you work in the editorial team

We store links for confirming your address and for resetting your password only as a hash. They are valid for 24 hours and one hour respectively, and only once.

If you work in the editorial team, we log your changes with your account and the time, so that it remains traceable who changed what.

Signing in with Google

If you choose ‘Continue with Google’, you sign in with Google. Google then sends us your Google ID, your email address as verified by Google and your name. We request nothing more. We do not store a profile picture that Google sends along; we have no access to any other data in your Google account.

Google’s privacy policy also applies to signing in with Google.

Emails

We only write to you when you trigger it: to confirm your address and to reset your password. We do not send newsletters or advertising.

Where the data is stored

schwur.ch runs on Google Cloud (Google LLC) in the us-central1 region in the USA. The database, the stored sources and the server logs are located there.

Google LLC is certified under the Swiss-U.S. Data Privacy Framework. Since 15 September 2024, the Federal Council has recognised that companies certified in this way provide an adequate level of data protection.

How long we store data

Account data until you have your account deleted. Server logs for 30 days. Links for confirmation and for resetting can no longer be used once they have expired.

Your rights

You can ask at any time what we store about you, have incorrect details corrected and have your account deleted. To do so, write to fuerscht@gmail.com; we reply within 30 days. When deleting your account, we remove your email address, your name and your sign-in details.

If you do not agree with our reply, you can contact the Federal Data Protection and Information Commissioner (FDPIC).

Changes

If we change what we store, we update this page beforehand. The date below shows when it was last updated.