Privacy policy

Last updated: 15 November 2026

1. Who is responsible

Oscar Rojas
Alt-Mariendorf 50
12107 Berlin, Germany

2. Visiting the site

SwitchKit runs on a server of Hetzner Online GmbH in Germany. For every page request the web server logs the time, the address requested, the response status, the referring page, the browser type and a shortened IP address that no longer identifies your connection.

A full IP address is logged only when a request fails or is blocked as abuse. All log files are deleted after 14 days. The legal basis is our legitimate interest in running the site securely (Art. 6(1)(f) GDPR).

For visitor statistics we use Plausible Analytics (Plausible Insights OÜ, Estonia). It works without cookies and stores no personal data: we see totals such as page views and referring sites, never individual visitors. Your browser loads a small script from plausible.io for this; Plausible uses your IP address only briefly, to count a visit once per day, and does not store it. The statistics are not loaded on the pages you open from our emails. The legal basis is our legitimate interest in knowing which pages are useful (Art. 6(1)(f) GDPR).

3. Cookies and browser storage

We set no advertising or tracking cookies, so there is no consent banner. The site uses two functional cookies: csrftoken protects the forms against misuse, and django_language remembers the language you picked with the language switch.

If you choose dark or light mode, that choice is kept in your browser's local storage and never sent to us. This storage is strictly necessary for functions you asked for (§ 25(2) TDDDG).

4. Clicks to vendors and affiliate links

When you follow a link to a vendor we count the click: the vendor, the deal, the language, the page you were on and the time. We store no IP address, cookie or anything else that points to you.

Some of these links are affiliate links: the vendor may pay us a commission if you buy. On the vendor's site the vendor is responsible for your data and may set its own cookies; its privacy policy applies there.

5. Weekly email

If you subscribe, we store your email address, the language of the site at that moment, and when you signed up and confirmed. We first send a confirmation link and email you only after you click it (double opt-in). The legal basis is your consent (Art. 6(1)(a) GDPR).

Every email has an unsubscribe link, and you can withdraw your consent at any time. Sign-ups that are never confirmed are deleted after 30 days, and your address is deleted within 30 days after you unsubscribe. Our emails contain no tracking pixels.

6. Writing to us

If you email us, we use your message and address to answer you and keep the exchange for as long as that takes, or as long as the law requires for business correspondence (Art. 6(1)(b) and (f) GDPR).

7. Who else processes your data

Three providers work for us under data processing agreements (Art. 28 GDPR): Hetzner Online GmbH, Germany, hosts the site and its database; mailbox.org (Heinlein Hosting GmbH, Germany) sends our emails and runs our mailbox; Plausible Insights OÜ, Estonia, provides the visitor statistics. Your data stays in the European Union, and we do not sell or pass on your data.

We back up the database every night and keep each backup for 14 days, so deleted data is gone from the backups after that time.

8. Your rights

You have the right to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21). Where processing is based on your consent, you may withdraw it at any time with effect for the future.

To use any of these rights, write to us: hello@switchkit.eu

You may also complain to a data protection supervisory authority. For Berlin this is the Berliner Beauftragte für Datenschutz und Informationsfreiheit.

9. Changes

We update this policy when our processing changes and show the date of the latest version at the top.