Privacy
Last updated: 4 November 2026 — draft for review
In short
We collect only what we need to answer your request.
No advertising, no analytics, no optional cookies today.
This text follows the Swiss Federal Act on Data Protection (FADP). The GDPR is mentioned where it applies.
Data controller
Registered name and address: [to be confirmed by the operator]
Contact for privacy requests: [to be confirmed by the operator]
Data collected today
If you write through the form: your name, email address and message.
Optional: arrival and departure dates, number of guests, preferred unit (Obsidian or Emerald).
We also record the page language, your acknowledgement of this notice, the version of this text and the time of sending.
Our servers process your IP address to limit abusive submissions (rate limiting). It is also part of the technical logs of our hosts.
An enquiry is not a booking.
Why we use this data
To answer your request and find it again if needed.
To protect the site against abuse.
To prove which version of this notice you acknowledged.
Data planned once direct booking opens
Status: planned, not active yet.
For a direct booking we will also process: guest identity, contact details, dates and unit, amount paid, accepted terms, and payment details handled by Stripe (we do not see your card number).
This page will be updated before opening.
Bookings through other platforms
If you book through Booking.com or another platform, that platform is responsible for its own data. We receive the information needed for your stay.
Providers that process data for us
Active: Vercel (website hosting), Railway (server and database). They process technical data and the content of your requests on our behalf.
GitHub hosts the source code. It receives no guest data.
Planned, not active yet: Stripe (payment), Bexio (accounting), an email service, a WhatsApp messaging service (with separate consent), Booking.com.
Countries of processing and safeguards for transfers outside Switzerland: [to be confirmed by the operator]
Retention
Enquiries: [to be confirmed by the operator]
Stay and payment records: [to be confirmed by the operator]
Accounting records: [to be confirmed by the operator]
Technical logs and backups: [to be confirmed by the operator]
Your rights
You may ask for access to your data, correction, deletion or a copy in a common format, and object to processing, as far as the law provides.
You can withdraw a consent at any time. This does not affect what was done before.
To exercise your rights: [to be confirmed by the operator]
You may also contact the Swiss Federal Data Protection and Information Commissioner (FDPIC).
Cookies and local storage
See the Cookies page. In short: strictly necessary items only.
Changes
We will update this text before any new processing (for example analytics or payment). The version and date are at the top of the page.