Data protection
Privacy notice
Data protection is our first principle: we collect as little data as possible and keep it in Switzerland.
Draft pending legal review — details marked with [ ] are completed before publication.
Last updated: 12 July 2026
Controller
Controller under the Swiss Federal Act on Data Protection (FADP) and, where applicable, the GDPR: [RECHTSTRÄGER — VOR VERÖFFENTLICHUNG ERGÄNZEN], [ADRESSE — VOR VERÖFFENTLICHUNG ERGÄNZEN], Switzerland. UID: [UID — VOR VERÖFFENTLICHUNG ERGÄNZEN].
Contact for data protection enquiries: info@digitaleslernen.org
Principles
We collect only the data needed to run the platform. No advertising, no marketing tracking, no profiling, no selling of data.
Data we process
Visiting the site: no analytics or marketing data is collected. The server processes technical connection data (IP address, requested page) in short-lived access logs, solely for operations and abuse prevention.
Individual account: email address, hashed password, display name and optional community handle. Self-declared school or organization information is optional and editable; only you and platform administrators can see it. Administrators use it and the lowercase email domain to count accounts, without verifying affiliation or creating membership or permissions. It is not included in community posts.
Cookies and sessions
We set only strictly necessary cookies: a session cookie (“dl_session”) after login and a CSRF protection cookie (“csrf_token”). No marketing or tracking cookies are set. The session cookie is removed on logout. A normal session lasts up to four hours; no remember-device option is offered. Email verification is required to sign in. Unverified accounts become eligible for cleanup after seven days; protected accounts and accounts linked to retained records are excluded, so complete removal of those records is not promised.
No third-party services in the browser
Fonts are served from our own servers (no third-party font CDN). We use no external captcha, no external analytics, and no advertising networks. Viewing our pages therefore sends no data from your browser to third parties.
Payments
No purchase or pass is required for the current public apps or Community. No online checkout is offered here. Existing financial history remains visible only to platform administrators; signed Stripe notifications continue to reconcile that history.
Storage and hosting
Application data is stored in a database we operate ourselves, on infrastructure located in Switzerland.
Your rights (FADP / GDPR)
You have the right to access your data, to have it rectified or erased, and to object to its processing. Where the GDPR applies, restriction of processing and data portability apply in addition. Send your request to info@digitaleslernen.org.
You may also contact the Swiss Federal Data Protection and Information Commissioner (FDPIC) or, where applicable, the competent supervisory authority.