Legal
Privacy notice
What is collected, why, for how long, and who else touches it.
Who is responsible
The controller of the data described here is:
Piotr Palach
palachdigital · Swiss Tax Kit
Weberstrasse 7
4663 Aarburg
Switzerland
support@swisstaxkit.ch
The waiting list
If you join the waiting list we store your email address, the language you were reading in, the page you signed up from, and your IP address. We also store what you asked to hear about: the statement, a DA-1 claim for the tax years you ticked, or support for a broker you named. The address is used to write to you about those things and nothing else. The IP address is used only to rate-limit the form against abuse, and it is not used to identify you.
We keep your address until you ask us to remove it or unsubscribe, whichever comes first. Write to support@swisstaxkit.ch and it is deleted.
Statements you generate
Your upload is processed in memory and deleted within 24 hours. The broker export you upload is parsed in memory and is never written to disk. What is stored is a small number of summary figures — how many positions were read, the totals, and whether payment succeeded — so that reloading the page returns your file. Those records are deleted when the job expires.
If you choose to give your first and last name for the statement, it is held in memory next to your parsed export, printed on the statement as its Kunde, and deleted with the export. It is never written to the database or to any log.
We do not have user accounts, so there is no profile of you to build and none is built.
If you pay
A purchase is a business record, and Swiss bookkeeping law (OR Art. 958f) requires us to keep it for ten years. It holds the email address you paid with, the tier and the amount, the payment provider's identifiers, and — for each statement it produced — the broker, the tax year, the canton, how many positions were read, the document reference and a checksum of the files. It never holds a holding, a value, or the files themselves.
We email your files once, to the address you paid with, with the XML and the PDF attached. That copy is yours; we keep none. The service that carries the email is named in the table below.
When you come back for another statement, the link to your purchases and the link that starts the next statement are single-use tokens that expire on their own. Neither is stored in your browser.
At checkout you can ask to be reminded the following January that the new year's statement can be generated. That is one email a year, and every one carries a link that stops them with one click.
Cookies and statistics
One cookie, and only if you switch the appearance. No tracking cookies, no account, and analytics that stores no identifier on your device. The one cookie stores a single word, light or dark, so the page does not flash the wrong appearance when you return. It is not read by anyone else and it identifies nothing.
Site statistics are collected without storing any identifier on your device, which is why you are not asked to accept anything. You can block them in your browser without affecting the site.
Who else touches your data, and where
| Service | Country | What it does |
|---|---|---|
| Hosting | Switzerland (Infomaniak, Geneva) | Runs the site and the database |
| Stripe | Ireland and the United States | Takes payment and emails your receipt. We never see your card details. |
| Mailgun | EU region [to be confirmed] | Sends your files, the waiting-list message and your download link |
Nothing else receives your data. We do not sell it, and there are no advertising or profiling services on this site.
Your rights
You can ask what we hold about you, ask for it to be corrected, and ask for it to be deleted. Write to support@swisstaxkit.ch. You can also complain to the Federal Data Protection and Information Commissioner.