Privacy Policy
This privacy policy explains what personal data we process on this platform, for which purposes, and what rights you have. It follows the revised Swiss Federal Act on Data Protection (FADP, in force since 1 September 2023).
Controllers
Joint controllers within the meaning of the FADP are Jasmin Fitz and Dario Glasl. You can reach us by email at jasmin.fitz00@gmail.com.
Data we process
We process the following personal data: on sign-up, your email address and — when signing in with Google — your display name; when creating a wish list, the content you enter (title, descriptions, images, event date, and your bank details/IBAN); when contributing, your name, email address, amount, and chosen gift.
Purpose of processing
We process this data solely to operate the wish-list service: to authenticate users, to display and manage wish lists, and to coordinate contributions between guests and list owners.
Recipients and processors
We do not share data with third parties for advertising or sales purposes. The following processors are used: Netlify, Inc. (USA) for hosting of the web application, delivered via a global CDN with edge locations worldwide; Supabase as our database and authentication backend, with a data centre in Zurich, Switzerland; Hostpoint AG (Switzerland) as the domain registrar (processing only domain and DNS metadata, no application data); and Google LLC (USA) — the latter only when you actively sign in with Google.
Cross-border transfers
Your application data (wish lists, gifts, contributions and account information) is stored with Supabase in Zurich, Switzerland. The web application itself is delivered through Netlify's global CDN, which means connection metadata (such as IP address and browser headers) may be processed at edge locations worldwide, including outside Switzerland and the EU. A transfer to the United States also occurs when you sign in via "Continue with Google". Data processing by Netlify, Inc. and Google LLC takes place under their own contractual safeguards within the meaning of Art. 16 revFADP.
Retention
We do not delete any data automatically. Wish lists, contributions and account data remain stored until you remove them yourself. You can delete your wish list — along with all its gifts and contributions — at any time from the settings. To have your account fully deleted, send a short message to jasmin.fitz00@gmail.com.
Cookies and tracking
We only use strictly necessary cookies required for authentication and session management (Supabase Auth). There is no tracking, no analytics and no advertising measurement.
Your rights
Under Art. 25 ff. revFADP you have the right to access, rectification, erasure and data portability. You can exercise these rights at any time by email to jasmin.fitz00@gmail.com. You also have the right to lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC).
Changes to this policy
We may update this privacy policy if features or legal requirements change. Last updated: 20 May 2026. The German version is authoritative.