Privacy Policy

Effective Date: December 25, 2025

This Privacy Policy explains how Krypto Politik ("we", "us", or "our") collects, uses, and protects your personal data when you visit our website kryptopolitik.ch. We are committed to protecting your privacy in accordance with the Swiss Federal Act on Data Protection (nDSG) and the EU General Data Protection Regulation (GDPR).

1. Data Controller

2. Data We Collect

2.1 Analytics Data

With your consent, we use PostHog for website analytics. This may include:

• Pages visited and time spent
• Referring website
• Browser type and version
• Device type and screen resolution
• Approximate location (country/city level)
• Anonymized IP address

Performance measurement (no consent required): We measure the loading performance of our pages (Core Web Vitals: LCP, CLS, INP, FCP, TTFB) on every visit, so we can detect and fix technical problems. This measurement uses no cookies and needs no consent because it is anonymous: no IP address, no identifier, and no personal data are stored. We collect only the performance values plus coarse technical context (device type, connection type, the page template visited, language, and app version). The legal basis is our legitimate interest in a functioning website (Art. 6(1)(f) GDPR).

2.2 Authentication Data

If you choose to create an account, we collect:

• Email address
• Name (if provided)
• Login timestamps

2.3 Cookies

We use the following cookies:

3. Purpose of Processing

We process your data for the following purposes:

• Website improvement: Understanding how visitors use our site to enhance user experience
• Authentication: Enabling secure login and personalized features
• Preferences: Remembering your cookie consent and theme settings
• Security: Protecting against fraud and abuse

4. Legal Basis

We process your personal data based on:

• Consent (Art. 6(1)(a) GDPR / Art. 31 nDSG): For analytics cookies. You can withdraw consent at any time by declining cookies.
• Legitimate Interest (Art. 6(1)(f) GDPR / Art. 31 nDSG): For essential website functionality and security.
• Contract (Art. 6(1)(b) GDPR): For providing authentication services when you create an account.

5. Third-Party Services

We use the following third-party services:

6. International Data Transfers

Some of our service providers may process data outside of Switzerland and the EEA. Where this occurs, we ensure appropriate safeguards are in place, including:

• EU-US Data Privacy Framework certification
• Standard Contractual Clauses (SCCs)
• Adequacy decisions by the Swiss FDPIC or EU Commission

7. Data Retention

We retain your data for as long as necessary for the purposes described:

• Analytics data: 24 months
• Account data: Until you delete your account
• Cookie preferences: 12 months

8. Your Rights

Under Swiss (nDSG) and EU (GDPR) data protection law, you have the following rights:

• Right of access: Request a copy of your personal data
• Right to rectification: Correct inaccurate or incomplete data
• Right to erasure: Request deletion of your data
• Right to restrict processing: Limit how we use your data
• Right to data portability: Receive your data in a structured format
• Right to object: Object to processing based on legitimate interest
• Right to withdraw consent: Withdraw consent at any time (e.g., by declining cookies)

To exercise any of these rights, please contact us at contact@fabianhediger.com.

9. Right to Lodge a Complaint

If you believe your data protection rights have been violated, you have the right to lodge a complaint with:

10. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including:

• HTTPS encryption for all data transmission
• Secure authentication via Auth0
• Regular security updates
• Access controls and monitoring

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting the new policy on this page with an updated effective date.

12. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us: