Privacy Policy
Last updated: September 28, 2026 · Applicable law: Swiss nDSG (new Federal Act on Data Protection)
1. Data Controller
MEconomy ("we", "us") operates the website meconomy.ch. For data protection inquiries, contact us at privacy@meconomy.ch.
2. Data We Collect
2.1 Comparison Data (Public)
Plan pricing, features, and provider metadata are publicly scraped from official provider websites. This is non-personal, publicly available information.
2.2 Account Data (When You Sign Up)
- Email address — used for authentication and account recovery
- Watchlist selections — plan fingerprints you save for price alerts
- Session tokens — managed by Supabase Auth for secure login
2.3 Technical Data
- We do not use analytics cookies or tracking pixels
- We do not use Google Analytics or similar tracking services
- Standard web server logs (IP address, user agent) may be retained for up to 30 days for security purposes
3. Legal Basis for Processing
- Consent — when you create an account, you consent to the processing described here
- Contractual necessity — account data is necessary to provide watchlist and alert features
- Legitimate interest — server logs for security and abuse prevention
4. Third-Party Services
| Service | Purpose | Data shared |
|---|---|---|
| Supabase | Database & Authentication (servers in Zurich, Switzerland) | Email, session tokens, watchlist data |
| Resend | Sending account emails (sign-up confirmation, password reset) | Email address, the content of those emails |
| Cloudflare | Website hosting and delivery (Cloudflare Pages) | IP address (server logs) |
Your account data is stored on servers in Zurich, Switzerland. Resend and Cloudflare may process the data listed for them outside Switzerland, including in the USA.
5. Data Retention
- Account data — retained while your account is active; deleted within 30 days of account deletion
- Watchlist data — deleted when you remove items or delete your account
- Server logs — automatically purged after 30 days
6. Your Rights Under nDSG
Under the Swiss new Federal Act on Data Protection, you have the right to:
- Access — request a copy of all personal data we hold about you
- Rectification — correct inaccurate personal data
- Deletion — request deletion of your account and all associated data
- Data portability — receive your data in a structured, machine-readable format
- Objection — object to processing based on legitimate interest
To exercise these rights, email privacy@meconomy.ch. We will respond within 30 days.
7. Cookies
MEconomy uses only essential cookies required for authentication (Supabase session tokens). We do not use advertising, analytics, or tracking cookies. Under Swiss law (nDSG), a cookie consent banner is not required when only essential cookies are used.
8. Data Security
- All data in transit is encrypted with TLS 1.3
- Database access is protected by Row-Level Security (RLS) policies
- API keys are rotated and stored in secure environment variables
- Security headers (HSTS, CSP, X-Frame-Options) are enforced on all pages
9. Supervisory Authority
If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC).
10. Changes to This Policy
We may update this privacy policy from time to time. Changes will be posted on this page with an updated "last updated" date. Continued use of MEconomy after changes constitutes acceptance of the revised policy.