Legal

Privacy policy

Last updated: 11 September 2026. This policy covers the website msstrategies.ch (including www.msstrategies.ch). It follows the Swiss Federal Act on Data Protection (FADP) and, for visitors from the EU, the GDPR.

1. Who is responsible

2. Hosting and server logs

This website is operated on our own server, rented from Hostinger International Ltd., Larnaca, Cyprus, in a data center in Frankfurt am Main, Germany. When you open a page, the server processes technical access data: IP address, date and time, the URL requested and your browser's user agent. This is necessary to deliver the website and to keep it secure (GDPR Art. 6(1)(f), legitimate interest in a working and secure website). The data is not evaluated and no profiles are created; our web server does not store access logs.

Until our move to this server is complete, the website is still delivered by Vercel Inc., San Francisco, USA. After the move, Vercel forwards requests to the former address msstrategies.vercel.app to this website. In both cases Vercel processes the same technical data in its server logs, and this data can be transferred to the USA. Vercel is certified under the EU-U.S. and Swiss-U.S. Data Privacy Framework; in addition, the EU Standard Contractual Clauses apply.

3. Application form

If you apply for a backend audit on the application page, the following data is sent and stored:

• your name and email address
• business or website (optional)
• what you sell and what it costs, your approximate monthly revenue range, and where your back end breaks today
• the time of submission and the page it was sent from (added automatically)

Purpose: reviewing your application and replying to you. Nothing else, no newsletter, no sale of data. Legal basis: steps taken at your request before a possible contract (GDPR Art. 6(1)(b)).

Where it is stored: in a database operated for us by Supabase Inc., USA, as a processor. The database is located in the EU (AWS region eu-central-1, Frankfurt, Germany). Because Supabase is a US company, access from the USA cannot be ruled out; Supabase's data processing agreement covers such transfers with the EU Standard Contractual Clauses.

How long: until your application has been handled, at the latest 12 months after submission, then it is deleted. If we start working together, the data needed for the engagement is kept for as long as the engagement and statutory retention periods require.

4. Email

If you write to kontakt@msstrategies.ch, your message and address are processed to answer you. The mailbox is hosted by Hostpoint AG, Switzerland. Retention as for the application form.

5. Cookies, local storage and tracking

This website sets no cookies and stores nothing in your browser (no local storage). It uses no analytics, no tracking pixels and no advertising tools, and it embeds no third-party content such as videos, maps or chat widgets. Fonts (Inter Tight and JetBrains Mono) are served from this website itself, so no request goes to Google or any other font provider.

Because nothing optional is loaded, there is no cookie banner. Nothing needs your consent.

6. Overview of recipients

7. Your rights

You can ask at any time for access to your data, for correction or deletion, and for a copy of your data in a common format. You can object to processing. Write to kontakt@msstrategies.ch.

You can lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC, edoeb.admin.ch) or, if you live in the EU, with the data protection authority of your country.

8. Changes

If the website starts processing data differently, this policy is updated first. The version published on this page applies.