Privacy Policy

1. Who is responsible

The controller for personal data processed through the Service is BrunnerWerk, Adrian Brunner, St. Jakobs-Strasse 108b, 4132 Muttenz, Switzerland, email info@gatherlist.ch.

2. Scope

This policy explains what personal data the Service processes, why, and your rights. It covers data about account holders and (separately) data that account holders enter about their guests (see section 4).

3. Account data we process

When you create an account we process your display name, your email address, and your password stored only as a bcrypt hash (we never store your password in plain text). We also process the venues, events, lists, staff memberships, invite codes and one-time share links you create while using the Service, and a record of your purchases (see section 6).

4. Guest data you enter (third-party personal data)

The core purpose of the Service is to let you keep guest lists. When you or your staff add a guest, the Service stores the guest's name and, optionally, a number of accompanying persons (“+N”) and a free-text note, together with an audit trail of which user added and checked in each guest. This is personal data about people who usually do not have their own account. For this data you (the account holder / venue) are the controller and are responsible for having a lawful basis to collect and store it; the operator processes it on your behalf to provide the Service. If you are a guest who appears on a list and want your entry accessed, corrected or deleted, please contact the venue or person who added you; the operator will support that venue's request as its processor.

5. Cookies and local storage

The Service does not use tracking or advertising cookies and does not run third-party analytics. To function, it stores two items in your browser's local storage: a login token (glm.token) that keeps you signed in, and your language preference (glm.lang). Both are strictly necessary for the Service to work and are removed from your browser when you log out (token) or can be cleared by clearing your browser storage.

Only in the demo workspace and on the public pages, the Service records which pages are opened and which actions are taken, tied to a session identifier that exists only for the current browser tab and to a daily salted, non-reversible hash of your IP address (the address itself is not stored); no cookie is set for this, and these records are deleted after 90 days.

6. Payments

Paid features are handled by Stripe, our payment processor. When you buy event credits or a pass you are taken to Stripe's hosted checkout; your card or TWINT details are entered on Stripe's systems and are never seen or stored by the Service. We store only a record of each purchase: the product, the amount and currency (CHF), the payment status, timestamps and the Stripe session identifier. Stripe acts as a sub-processor and independently as a controller for payment data under its own privacy policy (https://stripe.com/privacy).

7. Where your data is stored (hosting)

Application data is stored in a SQLite database on a single server hosted by Fly.io in Amsterdam, Netherlands (EU). Fly.io acts as a sub-processor providing hosting.

8. Sub-processors

We use the following sub-processors: Stripe (payment processing) and Fly.io (hosting). We do not sell your personal data and do not share it with third parties except these sub-processors and where we are legally required to.

9. Legal bases

We process account data and guest-list content to perform our contract with you (providing the Service); purchase records to comply with legal and accounting obligations and to operate the paid features; and technical/security data on the basis of our legitimate interest in keeping the Service secure and functional. Where a legal basis for guest data is required, you as the account holder are responsible for it (section 4).

10. Retention

Account data and the content you create are kept for as long as your account exists. If your account is deleted, your venues and their events, lists, guest entries and share links are permanently deleted with it; guest entries you added on other account holders' venues remain on those venues but no longer show who added them. Purchase records may be retained for as long as required by law.

11. International transfers

Application data is hosted in the EU (Amsterdam). Stripe may process payment data outside Switzerland and the EU/EEA under its own safeguards and standard contractual clauses.

12. Your rights

Subject to applicable law (Swiss FADP and, where relevant, the EU GDPR), you may request access to, correction of, deletion of, or a copy of your personal data, and you may object to certain processing. To exercise these rights for your account data, contact info@gatherlist.ch. For guest-list data about other people, see section 4. You may also lodge a complaint with a competent data protection authority (in Switzerland, the Federal Data Protection and Information Commissioner).

13. Security

Passwords are stored only as bcrypt hashes; access to accounts uses signed tokens (JWT) and the Service is served over HTTPS. No online service can be guaranteed perfectly secure, but we take reasonable measures to protect your data.

14. Children

The Service is intended for venue operators and their staff and is not directed at children.

15. Changes

We may update this policy; the “last updated” date at the top of this page reflects the current version.

16. Contact

Questions about this policy: info@gatherlist.ch.