Privacy policy

Last updated: August 2026

1. Controller

Vladimir Skromny
Im Gässli 19
8162 Steinmaur, Switzerland
Email: kontakt@kryptodeklara.ch

The controller within the meaning of the Swiss Federal Act on Data Protection (FADP) is the person named above. This policy applies to the website kryptodeklara.ch in all three language versions (German, French, English).

Where individuals in the EU/EEA use the website, the provisions of the General Data Protection Regulation (GDPR) apply in addition. The service is aimed at people with a tax liability in Switzerland.

2. What data we process

• Waiting-list signup: when you sign up for early access, we process your email address together with your optional details: the pricing tier you selected, your interest in declaring previous tax years retrospectively (voluntary disclosure), and the language of the page. These details are optional; without an email address, signing up is technically impossible.
• Usage statistics: we run our own audience measurement, on our own infrastructure in Switzerland. No external analytics service is used. For each visit we record: the path requested (without query parameters), the referring URL (domain and path only), the language, any campaign parameters (utm_source, utm_medium, utm_campaign), and the event triggered (page view, signup, click on "early access", choice of a pricing tier).
• No cookies, no storage of IP addresses: we set no cookies and store no IP addresses. To recognise repeat visits within the same day, we compute an irreversible hash from the IP address, the browser identifier and a random daily key. That key exists only in memory, is regenerated every day at 00:00 UTC and is never stored. The hashes therefore cannot be linked beyond a single day and cannot be traced back to an identified person. Because no cookies are set and no personal data is stored on or read from your device, no consent is required for this website.
• Service providers' server logs: when the website is accessed, technical log data is generated at our hosting and network providers (including IP address, timestamp, resource requested, browser identifier). We have no direct access to this data; it is processed by those providers in order to deliver and secure the service.

3. Purpose and legal basis

We use your email address solely to inform you about the launch of Deklara and your early-bird access. The usage statistics serve to test demand for the product and to improve the website and its language versions.

Processing is based on your consent (signing up to the waiting list) and on our overriding legitimate interest in privacy-preserving audience measurement. There is no sale and no disclosure to third parties for advertising purposes. No personality profiles are created.

4. Processors and disclosure abroad

• Form handling and data storage: your signup is not transmitted to an external form service. It goes directly to our own server in Switzerland and is stored there in a local database.
• Website hosting: the static pages are delivered via GitHub Pages (GitHub Inc., USA, Microsoft group).
• Network access: the connection to our server runs through the tunnel and DNS service of Cloudflare, Inc. (USA). Cloudflare processes connection data in the role of a transport provider.
• Fonts: this page loads fonts from Google Fonts (Google Ireland Ltd., Ireland). Your IP address is transmitted to Google in the process.

Some of these providers are based in the USA. Disclosure is based on the European Commission's standard contractual clauses or on certification under the Swiss‑U.S. Data Privacy Framework. The waiting-list and statistics data themselves do not leave Switzerland.

5. Retention and deletion

We keep waiting-list data (email address and optional details) until launch or until you withdraw. You can unsubscribe at any time, informally, by email to the address given above; your data is then deleted.

The pseudonymous usage statistics are deleted automatically after 400 days. Database backups are kept for 14 days and then deleted as well. Following a deletion at your request, your data may therefore still be contained in backups for up to 14 days.

6. Data security

Transmission is encrypted throughout (TLS/HTTPS). The database sits on a server in Switzerland which is not directly reachable from the internet, but only through an outbound, authenticated tunnel connection. Access to the stored data is limited to the controller and protected by an access token. We process only the data required for the stated purpose.

7. No automated individual decision-making

No automated individual decision within the meaning of Art. 21 FADP takes place that would produce legal effects concerning you or significantly affect you.

8. Your rights

Within the limits of applicable law, you have in particular the right to information about the data processed about you, to rectification of inaccurate data, to deletion or destruction, to release or transfer of your data (data portability), as well as the right to object to processing or to withdraw consent at any time. Withdrawal takes effect from the moment it is declared and does not affect the lawfulness of processing carried out up to that point.

Please contact us at the address given above. Identification may be required in order to handle your request.

You also have the right to lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC), Feldeggweg 1, 3003 Bern, Switzerland. Individuals resident in the EU/EEA may contact their competent supervisory authority.

9. Changes

We may adapt this privacy policy as required. The version published on this page applies.