The short version
This site runs no advertising, no analytics and no tracking. We don't set cookies, we don't profile you, and we never sell data — there is nothing to sell. The only personal data we ever hold is what the hosting of any website technically produces, and what you choose to send us through the contact form.
The rest of this page is the same statement, in the detail the law asks for.
Who is responsible
The controller for any personal data processed on this site is Ovadev GmbH, Lättichstrasse 6, 6340 Baar, Switzerland. For anything related to your data, write to [email protected] — the founders read that inbox themselves.
What we collect
Hosting logs
Like every web server, ours records technical details of each request: the IP address, the page requested, the time, and the browser's identification string. We use these logs only to run the site and to recognise abuse, and they are deleted on a short, rolling basis. They are never combined with other data or used to identify visitors.
The contact form
If you write to us, we receive what you put in the form: your name, your email address, the topic, your message, and — if you choose to share it — your company. We use this for exactly one thing: answering you. Your IP address is briefly held in memory to rate-limit the form against automated abuse; it is not stored with your message.
What stays in your browser
The theme toggle and the palette switcher store your choice in your browser's local storage, under the keys ova-theme and ova-palette. These values never leave your device — they are not cookies, they are not transmitted to us, and you can remove them at any time by clearing your browser's site data. That is the entire extent of what this site keeps on your machine.
How long we keep things
Messages you send us are kept for as long as the conversation needs, and after that only where a legal obligation — bookkeeping, for instance, if the conversation became a project — requires it. Hosting logs are deleted automatically after a short window. We keep nothing “just in case”.
Who else touches it
The site runs on the infrastructure of a hosting provider, which processes the technical data described above on our behalf and under contract. Depending on the provider's infrastructure, this processing can happen outside Switzerland; where it does, it is covered by the contractual safeguards Swiss data protection law requires for transfers abroad. No one else receives your data, and no third-party scripts run on this site.
Your rights
Under the Swiss Federal Act on Data Protection (FADP) — and the GDPR, where it applies to you — you can ask us at any time:
- What we hold — a copy of any personal data we have about you.
- To correct it — if something we hold is wrong.
- To delete it — we'll comply unless a legal duty requires keeping it.
- To stop processing it — object, and we stop unless the law says otherwise.
One email to [email protected] is enough. If you believe we handle your data badly, you can also complain to the Swiss Federal Data Protection and Information Commissioner (FDPIC).
Changes to this policy
If the site starts doing something new with data — a newsletter, say, or analytics — this page changes first, and the date at the top changes with it. What you read here is always the current state, not a historical one.