Last updated: 20 April 2026
1. Controller
Selfrag AG
Biberenzelgli 18, 3210 Kerzers, Switzerland
Email: info@selfrag.com ยท Phone: +41 31 750 32 32
This Privacy Policy explains how Selfrag AG ("we", "us") processes personal data when you visit selfrag.com.
2. Data we process and why
Contact form
When you submit the contact form, we process your name, email address, and message to respond to your inquiry. Legal basis: pre-contractual and contractual necessity (Art. 31 nDSG / Art. 6(1)(b) GDPR).
Newsletter
When you subscribe to our newsletter, we process your email address. Delivery happens via Mailgun (see below). Subscription is double opt-in; you can unsubscribe at any time via the link in each newsletter. Legal basis: consent (Art. 31 nDSG / Art. 6(1)(a) GDPR).
Website analytics (with consent)
If you accept the "Google Analytics 4" service in our cookie banner, we process aggregated usage data (pages viewed, referrer, approximate region, device type). IP addresses are anonymized; we do not enable advertising signals or ad personalization. Legal basis: consent.
Spam protection
We use CleanTalk and a time-based honeypot to filter bot submissions on forms. Only submission metadata is evaluated; no tracking cookies are set without consent. Legal basis: legitimate interest in protecting our infrastructure (Art. 31 nDSG / Art. 6(1)(f) GDPR).
Consent management
We use Klaro (self-hosted) to record your cookie preferences. A first-party storage entry named klaro stores your choice in your browser for 180 days. Legal basis: legal obligation to document consent.
3. Third-party services
| Service | Provider | Purpose | Location |
|---|---|---|---|
| Mailgun | Sinch Email Inc. | Transactional & newsletter mail | USA (Standard Contractual Clauses) |
| Google Analytics 4 | Google LLC | Website analytics | USA (SCCs + Data Privacy Framework) |
| Klaro | KIProtect (software); self-hosted by us | Consent management | Switzerland |
| CleanTalk | CleanTalk Inc. | Spam filtering | USA (SCCs) |
Transfers to the USA rely on Standard Contractual Clauses and the EU-US / Swiss-US Data Privacy Framework where applicable.
4. Storage duration
- Contact-form messages: 24 months after last interaction
- Newsletter subscriber list: until you unsubscribe
- Analytics data: 14 months (GA4 standard retention)
- Consent records: 180 days (browser storage)
5. Your rights
Under the Swiss nDSG and the EU GDPR, you have the right to access, rectify, and delete your data; to object to processing; to receive your data in a portable format; and to lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC) or your local EU supervisory authority.
6. Contact for privacy inquiries
Send an email to info@selfrag.com with subject "Privacy request". We respond within 30 days.
7. Changes to this policy
We update this policy when our processing changes. The "Last updated" date above reflects the most recent revision.