Privacy policy
Last updated: 26 October 2026
Overview
This privacy policy applies to the website patchrecon.com. It explains which personal data I process when you visit the website, join the waitlist or contact me by email. It is governed by the Swiss Federal Act on Data Protection (FADP). For people in the EU and EEA, the General Data Protection Regulation (GDPR) also applies where relevant.
In short:
- This website uses no cookies and no trackers.
- Fonts are served by patchrecon.com itself, not by third parties.
- I do not sell data or use it for third-party advertising.
Controller
Kevin Schneider, PatchRecon
[Postal address to follow]
Switzerland
Email: hallo@patchrecon.com
Visiting the website
The website runs on Cloudflare Workers, a service of Cloudflare, Inc. (USA). Cloudflare delivers the pages through a global network of data centres, each time from one near you.
With every request, Cloudflare processes technically necessary data:
- IP address
- date and time
- page requested and amount of data transferred
- browser and operating system (user agent)
- previous page (referrer), if your browser sends it
Purpose: delivering pages, keeping the site running and secure, fending off attacks. I do not use this data to identify people. Server access and error logs are deleted after 7 days at most. Cloudflare keeps security data for a limited time under its own rules.
Legal basis under the GDPR: legitimate interest in secure operation (Art. 6(1)(f)).
Waitlist
If you join the waitlist, I store:
- your email address
- your preferred platforms (optional)
- time of sign-up, page language and the version of the consent text, as proof of your consent
I do not store your IP address.
Purpose: I will email you when PatchRecon launches and, until then, send occasional news. Before I send you anything, you will receive an email with a confirmation link. You only receive further emails after you confirm. If you do not confirm within 30 days of that email, I delete your address. If you enter the same address again, the first entry stays unchanged.
The data is stored in a Cloudflare database (Cloudflare D1) held in data centres in the EU.
You can unsubscribe at any time via the link in every email or by sending a short message to hallo@patchrecon.com. I will then delete your data promptly.
Retention: until you unsubscribe, at the latest 6 months after PatchRecon launches.
Legal basis under the GDPR: your consent (Art. 6(1)(a)). You can withdraw it at any time with effect for the future.
Spam protection (Cloudflare Turnstile)
The waitlist form is protected by Cloudflare Turnstile. Turnstile is only loaded once you use the form. It checks whether a human or a bot is submitting the form. For this, Cloudflare processes your IP address, browser data (user agent, TLS characteristics) and the address of the website. According to Cloudflare, this data is used only to detect bots, not to identify people or build profiles. Cloudflare is itself responsible for improving its bot detection.
Legal basis under the GDPR: legitimate interest in preventing abuse (Art. 6(1)(f)).
Contact by email
Emails to hallo@patchrecon.com are forwarded by Cloudflare Email Routing to my mailbox at Microsoft (Outlook.com). According to Cloudflare, no content is stored during forwarding. Microsoft stores the emails in my mailbox. I use your information only to answer your request and delete emails once they are no longer needed, unless a legal retention duty applies.
Legal basis under the GDPR: handling your request (Art. 6(1)(b) or (f)).
Recipients
| Recipient | Task | Role | Location |
|---|---|---|---|
| Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA | Hosting and delivery, waitlist database, spam protection, email forwarding | Processor, partly independent controller for Turnstile | USA and worldwide (Cloudflare data centres), database in the EU |
| Microsoft Ireland Operations Limited, Ireland, and Microsoft Corporation, USA | Email mailbox (Outlook.com) | Independent controller | Ireland, USA and other countries |
Beyond this, I only share data where the law requires it, for example with authorities.
Transfers abroad
Your data may reach the USA and other countries where Cloudflare or Microsoft operate data centres. Cloudflare and Microsoft state that they are certified under the Swiss-U.S. and EU-U.S. Data Privacy Framework. The Swiss Federal Council and the European Commission have found that certified companies offer an adequate level of data protection. For countries without an adequate level, the providers rely on the European Commission's Standard Contractual Clauses.
No automated decisions
I make no automated individual decisions and create no profiles.
Your rights
You can at any time:
- request access to your data
- have incorrect data corrected
- have your data deleted
- object to processing or withdraw your consent
- receive your data in a common format
- under the GDPR, also request restriction of processing
Write to hallo@patchrecon.com. If necessary, I will ask you to confirm your identity.
Complaints
In Switzerland: Federal Data Protection and Information Commissioner (FDPIC), Feldeggweg 1, 3003 Bern, www.edoeb.admin.ch.
In the EU and EEA: the data protection authority of your country of residence, for example the authority of your federal state in Germany or the Datenschutzbehörde in Austria (www.dsb.gv.at).
The PatchRecon app
This privacy policy applies to the website only. The PatchRecon app is still in development. It will transfer device data such as driver and software versions for analysis. A separate privacy policy will apply to the app, which I will publish before the app launches, including which service providers in which countries are involved. The website does not collect any device data.
Changes
I will update this privacy policy when the website or the law changes. The version published here applies.