Privacy policy

Last updated: 13 November 2026

This policy explains which personal data this website processes, why, and for how long. It follows the Swiss Federal Act on Data Protection (FADP) and, where it applies, the EU General Data Protection Regulation (GDPR).

1. Who is responsible

There is no data protection officer; write to the address above with any question about your data.

2. In short

• No cookies, no local storage, no analytics, no tracking, no advertising.
• No accounts. The only form is the optional newsletter sign-up; your email address is kept only if you confirm it.
• The website is hosted by Google in the Netherlands; technical logs are kept for 30 days.
• YouTube video previews load from Google; a video itself only loads when you click it.
• Email and WhatsApp are links. You decide whether to use them.

3. Visiting the website: hosting and server logs

The website runs on Firebase App Hosting, a service of Google Cloud (Google Ireland Limited / Google LLC), in Google’s data centre region in the Netherlands (europe-west4). Every visit is logged technically: IP address, date and time, the page requested, the referring page, browser and operating system. This is needed to deliver the website, keep it secure and find errors (legitimate interest; Art. 6(1)(f) GDPR). The logs are deleted after 30 days. Google processes this data on the website owner’s behalf and may access it from other countries, including the USA, under the Swiss–US and EU–US Data Privacy Frameworks and standard contractual clauses. See Google’s data processing terms.

4. Nothing stored on your device

The website sets no cookies and uses no local storage. Fonts, scripts and images are served from this website itself; the only exception is described in section 5.

5. YouTube

The YouTube section shows preview images of videos. These images load from Google’s servers (i.ytimg.com) when the section comes into view, so your browser sends your IP address to Google. A video itself loads only when you click it, and then from youtube-nocookie.com, YouTube’s mode that sets no cookies until you play the video. From that point, Google’s privacy policy applies.

6. Contacting me: email and WhatsApp

If you write an email or a WhatsApp message, your contact details and message are used only to reply to you (pre-contractual measures or legitimate interest; Art. 6(1)(b) and (f) GDPR). The mailbox is hosted by Apple (iCloud Mail). WhatsApp is a service of Meta Platforms Ireland Ltd.; using it is your choice, and WhatsApp’s privacy policy applies to the chat. Messages are deleted once the conversation is over, unless the law requires them to be kept.

7. Contact card and QR code

The contact card (vCard) and the QR code contain Emanuel Flury’s own contact details. Downloading the card or scanning the code transfers nothing about you; the data is saved only on your device.

8. Newsletter

You can subscribe to receive new notes by email. To do so, you enter your email address. You then receive an email with a confirmation link (double opt-in); you are only subscribed once you click it. The legal basis is your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time.

Stored: your email address, the language you signed up in, the time you signed up and the time you confirmed, and a random code for the unsubscribe link. Unconfirmed sign-ups are deleted automatically after 7 days. To prevent abuse, the number of sign-ups per day is counted using an irreversible code made from your IP address and the date; the IP address itself is not stored, and the counter is deleted after two days.

The data is stored in Google Cloud Firestore in Google’s data centre in Zurich, Switzerland (europe-west6), in this website’s own project; it is not given to any newsletter service. The emails are sent from Emanuel Flury’s own mailbox, me@eflury.com, which is hosted by Apple (iCloud Mail). Google and Apple process the data on the website owner’s behalf. The emails contain no tracking pixels and no tracked links.

Every email has an unsubscribe link. When you unsubscribe, your email address is deleted immediately. You can also unsubscribe by writing to me@eflury.com.

9. RSS feed

The notes are also available as an RSS feed at eflury.com/rss.xml. A feed reader fetches it like any other page (see section 3); nothing else is recorded.

10. Links to social networks

Links to LinkedIn, Instagram, TikTok, YouTube, Facebook, GitHub and WhatsApp are plain links. No data is sent to those networks unless you click a link; after that, their privacy policies apply.

11. Security

The website is only served over an encrypted connection (HTTPS with HSTS). There are no user accounts and no database of visitors. The newsletter list can only be read by the website itself and by its owner; it is not reachable from the internet.

12. Your rights

You can ask for information about the personal data processed about you, and for it to be corrected or deleted. You can object to processing and, under the GDPR, ask for it to be restricted or handed over to you. Write to me@eflury.com. You can also complain to the Swiss Federal Data Protection and Information Commissioner (FDPIC) or to a data protection authority in the EU.

No decisions are made about you automatically, and no profiles are created.

13. Changes

This policy is updated when the website changes. The current version is always the one on this page.