Privacy Policy
Effective date: 5 August 2026
This is a non-commercial, personal hobby project. Bay & Byte is not a registered business. This policy explains what data is collected when you visit bayandbyte.com and how it's handled, in line with the Swiss Federal Act on Data Protection (revFADP) and, where applicable, the EU General Data Protection Regulation (GDPR).
1. Who runs this site
Christoph Schön
6300 Zug
Switzerland
Email: bayandbyte@gmx.net
2. What data is collected
2.1 Analytics
This site uses PostHog for analytics, running in cookieless mode: no persistent tracking cookie or cross-visit identifier is set. Each pageview and a small number of interaction events (e.g. which filters are used, which tool listings are opened) are recorded anonymously to understand how the site is used. Session recording is disabled.
You can stop this at any time — your choice is remembered on this device and takes effect immediately.
2.2 Tool suggestions
If you submit a tool via the "Suggest a tool" form, we store the tool name, website, any note you provide, and your email address. Your email is stored in a separate, non-publicly-readable table and used only to follow up on your suggestion if needed (e.g. to ask a clarifying question before approval) — it is never displayed publicly or attached to the tool listing itself.
2.3 Accounts (not yet active)
Garage and vendor account sign-up is planned but not yet live. Once introduced, this policy will be updated to describe what account data (e.g. email address) is collected and why, before that feature launches.
3. Why data is processed
- Improving the site: understanding how visitors use it, to fix problems and improve the experience
- Reviewing submissions: evaluating tool suggestions before adding them to the directory
4. Legal basis
- Legitimate interest (Art. 31 revFADP / Art. 6(1)(f) GDPR): for anonymous, cookieless analytics needed to understand and maintain the site. You can object to this at any time via the opt-out mechanism above.
- Note for EU visitors specifically: GDPR's stricter consent rules may apply to you individually depending on how analytics are configured; the opt-out above is available regardless.
5. Third-party services used
| Service | Purpose | Data location | Their privacy policy |
|---|---|---|---|
| PostHog | Analytics | EU | https://posthog.com/privacy |
| Supabase | Database & backend | eu-west-3 (Paris, EU) | https://supabase.com/privacy |
| Vercel | Hosting | Global CDN, US-based company | https://vercel.com/legal/privacy-policy |
6. International data transfers
Some providers above may process data outside Switzerland/the EEA (e.g. Vercel, US-based). Where this happens, we rely on the safeguards those providers offer, such as standard contractual clauses or equivalent frameworks.
7. Data retention
- Analytics data: retained per PostHog's platform default retention for this project; since events are cookieless and anonymous, they cannot be tied back to a specific visitor to delete individually
- Tool suggestions (including the submitter's email address): retained until reviewed; rejected suggestions may be deleted, including the associated email
8. Your rights
Under Swiss and (where applicable) EU data protection law, you have the right to:
- Request a copy of data held about you
- Request correction of inaccurate data
- Request deletion of your data
- Object to processing based on legitimate interest
- Withdraw consent at any time, where consent is the basis for processing
To exercise any of these, contact bayandbyte@gmx.net.
9. Right to complain
If you believe your data protection rights have been violated, you may lodge a complaint with:
Federal Data Protection and Information Commissioner (FDPIC)
Feldeggweg 1, 3003 Bern, Switzerland
https://www.edoeb.admin.ch/
10. Data security
- HTTPS encryption for all traffic
- Access controls on the underlying database (Row Level Security)
- No advertising trackers or data resale of any kind
11. Changes to this policy
This policy may be updated as the site evolves (particularly once account features launch). Material changes will be reflected here with an updated effective date.
12. Content disclaimer, accuracy, and copyright
For information about content accuracy, trademark use, and the non-endorsement disclaimer, see the separate Legal Notice.
13. Contact
Last updated: 5 August 2026