Privacy notice
This notice explains how personal data is handled on this website in its current form: public pages, a newsletter sign-up and an invitation-only portal. It is information, not a contract. It will be updated before new parts of the site start collecting data.
Who is responsible
The operator named in the imprint. Questions about your data: privacy@bitbeaver.ch.
Visiting the site
The web server records the IP address, time, requested page and browser type of each request, to deliver the site and keep it secure (legitimate interest). Tokens in links are removed from these records. There is no analytics, no tracking and no advertising, and the site loads nothing from other companies: fonts and scripts come from this site itself.
Cookies and browser storage
Only cookies that the site needs: a security cookie that protects the sign-up form, and a session cookie when you open a confirmation link. If you switch between light and dark, that choice is kept in your own browser and never sent to us.
The newsletter
When you sign up, we store your e-mail address, the language of the page, the boxes you ticked, the time of sign-up and confirmation, and the versions of the form and of this consent text. This rests on your consent, which you give by confirming the link we send you. You can withdraw it at any time with the unsubscribe link in every e-mail.
If you do not confirm, the entry is deleted after 7 days. When you unsubscribe, your entry is deleted. We keep the proof of your consent and of its withdrawal, and a hashed entry of your address so that we do not e-mail you again. That hashed entry is still personal data; it is kept only to honour your choice.
Portal access requests and accounts
If you ask for portal access, we store your name, e-mail address, the roles you ticked and your message, to answer your request (steps towards a contract). The founder reviews requests. If you are invited, your account holds your name, e-mail address, a hash of your password and your group; we record that you accepted the portal terms, and which chapters you open, so that the founder can see what is useful.
The chapter assistants
Where a chapter has an assistant, your questions and the chapter text are sent to OpenAI (Ireland, with transfers to the USA) to produce the answer; they are not used to train models. Questions with personal details are stopped before they reach the model. See the AI notice.
Service providers
The site runs on a server rented from Hetzner Online GmbH in Germany. Backups are stored with the same provider at another location in the European Union. E-mails are delivered through Brevo (Sendinblue SAS, France). Each e-mail is handed over for delivery only; the list itself stays on our server.
How long data is kept
| Data | Kept for | Then |
|---|---|---|
| Web server access logs (IP address, path; tokens removed) | 30 days | Rotated out |
| Unconfirmed sign-ups | 7 days | Deleted |
| Newsletter and contribute lists | Until you unsubscribe | Entry deleted |
| Proof of consent and of its withdrawal; hashed suppression entry | 3 years after you unsubscribe | Deleted |
| Outgoing mail queue | 30 days (links blanked once sent) | Deleted |
| Backups | Up to 6 months | Pruned; deletions are applied again after any restore |
| Portal access requests | Unverified: 7 days. Declined or waitlisted: 6 months after the decision | Deleted |
| Unused invitations | 30 days | Deleted |
| Portal accounts (name, e-mail, password hash, group) | While active; 12 months after the last sign-in, or on request | Deleted |
| Which portal chapters were opened | 12 months | Folded into totals per chapter |
| Questions to the chapter assistants and their answers (personal details removed) | 90 days; blocked draft answers 30 days | Text emptied; verdicts and counts kept |
| Conversation summaries | 12 months | Deleted |
| Acceptance of the portal terms (name, e-mail, version, time) | 10 years after the account ends | Deleted |
| Questions to the founder | 90 days | Deleted |
Your rights
You can ask what data about you is stored, have it corrected or deleted, object to its use, receive it in a common format, and withdraw your consent. Write to privacy@bitbeaver.ch. You can also complain to the Swiss Federal Data Protection and Information Commissioner or, where the GDPR applies, to the data-protection authority of your country.
Version 2026-10-25