Last updated: 2026-11-15
1. Controller
This privacy policy explains how personal data is handled on alpine-crafts.com. It follows the Swiss Federal Act on Data Protection (revDSG / nDSG). For visitors from the EU or EEA, the GDPR applies in addition where it is relevant.
2. Visiting the website (server logs)
When you open a page, your browser sends data that our server and its web server or proxy software process technically: your IP address, date and time, the requested address (URL), the status of the response, the referring page and information about your browser and device (user agent).
We process this data to deliver the website, to keep it secure and stable and to detect abuse. Our legitimate interest is the secure operation of the website. Access logs may be kept briefly for these purposes. Retention: 7 days.
The website is hosted on a server of Hetzner Online GmbH, Germany (data centre location: Germany). Hetzner processes data on our behalf as hosting provider.
The website is delivered through Cloudflare (CDN and protection against attacks). Cloudflare, Inc. (USA) processes request data such as the IP address and technical request information on its network.
Fonts are delivered from our own server; no font service of third parties is used.
3. Contact form
If you use the contact form, we process the name, email address and message you enter, and the language of the page you used. Your IP address is used briefly to limit abuse (rate limiting) and for spam protection; it is not saved together with your message.
Purpose: to read and answer your request. Legal basis: your consent through sending the form and our legitimate interest in handling enquiries; if your request concerns a contract or its preparation, the handling of that contract.
Your message is stored on our server and sent to us by email through the email delivery provider Resend (USA), which acts as our processor.
We keep your message as long as needed to handle your request, and then delete it. We do not pass messages on to other third parties.
Providing your details is voluntary, but without them we cannot answer you.
4. Spam protection (Cloudflare Turnstile)
The contact form is protected with Cloudflare Turnstile by Cloudflare, Inc. (USA). The Turnstile widget is loaded from challenges.cloudflare.com only on the contact page; while it runs, Cloudflare processes browser and device data (such as your IP address) to tell humans from automated programs. When you send the form, our server sends the check token to Cloudflare's verification service (and, only when the site is served through Cloudflare, your IP address as well), which returns the result of the check. In addition, the form contains a hidden field that only automated programs fill in, and the number of submissions per IP address is limited in the server memory (not stored permanently).
5. Visitor statistics (cookieless analytics)
We count visits with our own cookieless analytics. No third-party analytics service is used and no cookie or other identifier is stored on your device.
Only the number of page views per day for each public page and the host name of the referring website (for example "example.com", never the full address) are counted. To count unique visitors, your IP address and browser identifier are processed briefly to calculate a one-way hash, using a secret key that only we hold and the current date. The hash is truncated and used only to count unique visitors per day; we do not use it to identify you. It is pseudonymous data (we hold the key), kept in a short-lived file on the server and deleted at the latest with the first tracked visit of the following day. The IP address itself is not stored. In addition, the IP address is used briefly in server memory to limit the number of requests to the counting function (rate limiting).
Daily totals are kept for 25 months and contain no personal data. Known bots and our own visits are excluded. You can object to this processing at any time (see "Your rights" below).
6. Cookies and local storage
This website does not use tracking or advertising cookies. Only the following functional items exist:
- Theme preference (light or dark): stored in your browser's local storage under the name "ac_theme" when you use the theme switch. It stays on your device and is never sent to us.
- Language preference: the cookie "NEXT_LOCALE" may be set to remember the language of the page you chose. It is a session cookie with no tracking function.
- Administration area: cookies for logging in are set only for the owner of the website, never for visitors.
7. Recipients and processors
Your data may be accessible to the following service providers, who process it only for the purposes described above:
- Hetzner Online GmbH (Germany): server hosting.
- Resend (USA): delivery of the contact form emails.
- Cloudflare, Inc. (USA): Turnstile spam protection, CDN and attack protection.
8. Transfer of data abroad
Some of the providers named above are based in the USA, which does not have the same level of data protection as Switzerland. Where data is transferred there, we rely on the Swiss-US Data Privacy Framework if the provider is certified, or on standard contractual clauses and further safeguards. [Review: confirm the safeguards for each provider.]
9. Retention
We keep personal data only as long as needed for the purposes described, or as long as the law requires. Server logs: 7 days. Contact messages: as long as needed to handle your request, then they are deleted. Analytics daily totals: 25 months. Unique-visitor hashes: deleted at the latest with the first tracked visit of the following day.
10. Security
We take reasonable technical and organisational measures to protect personal data, such as encrypted connections (HTTPS) [Owner: confirm after deployment], restricted access to the administration area and limits against abuse. No transmission over the internet can be completely secure.
11. Your rights
Under the Swiss Federal Act on Data Protection you have the right to:
- information about whether and which personal data we process about you;
- correction of inaccurate data;
- deletion of your data or restriction of its processing;
- object to processing based on our legitimate interests;
- receive your data in a common electronic format (data portability);
- withdraw a consent you have given, with effect for the future.
12. Contact and complaints
To exercise your rights or for any questions, write to . We may need to verify your identity first.
You also have the right to lodge a complaint with the supervisory authority, in Switzerland the Federal Data Protection and Information Commissioner (FDPIC / EDÖB), www.edoeb.admin.ch.
13. Changes
We may update this privacy policy when the website or the legal situation changes. The current version is the one published here.