Privacy notice

What we process

Account data

Your email address and password hash, held by our authentication provider so you can sign in. Your ZC VIP ID, membership standing and the date your account was created. Registration requires scanning a member's referral code; we do not verify your email by sending a confirmation link.

Referral data

Which member issued the code you used and when it was claimed. This link is retained for as long as your account exists, because every file is attached to a member who vouched for it.

Message data

Message text, sender and recipient. A direct thread is readable only by its two members and a place thread only by signed-in members; as operator of the infrastructure we do not read them, but we are technically able to.

Presence and places

Only if you switch it on: a label you choose, coordinates rounded to roughly a city district, and an expiry you set. Places you share carry the city and your note. Switching presence off deletes the row.

Technical data

Our hosting and database providers process IP addresses, timestamps, user-agent strings and error traces in short-lived server logs to deliver the site and defend it against abuse. We run no advertising, no analytics, no tracking pixels and no third-party cookies. The only browser storage we use is the session token that keeps you signed in, plus the referral code held briefly during registration.

Why, and on what basis

We process account and referral data to operate your membership - the contract between you and the club (Art. 6(1)(b) GDPR). We process technical log data on the legitimate interest of keeping the service available and secure (Art. 6(1)(f) GDPR). Presence, shared places and optional profile details are processed on your consent (Art. 6(1)(a) GDPR), which you may withdraw at any time by switching the feature off. Under the nDSG this processing is lawful as it is proportionate, transparent and confined to the purposes stated here.

Recipients and where data sits

We use processors, bound by data-processing agreements, for hosting, database and authentication, and for map tiles rendered in your browser when you open a map. Servers may be located in the EU or the United States; transfers rely on the EU Standard Contractual Clauses and their Swiss adaptation. We disclose nothing to anyone else, except where Swiss law compels us - and we will say so publicly to the extent we are permitted.

How long we keep it

Account, referral and message rows are kept while your membership exists. Presence expires at the hour you set and is deleted. Server logs are short-lived and kept only as long as needed for security. If you close your account - or if the member who referred you recovers their code - the account and its rows are deleted, and the messages sent from it go with them.

Your rights

1. 01

   Access - a copy of the personal data we hold about you.

2. 02

   Rectification - correction of anything inaccurate.

3. 03

   Erasure - deletion of your account and associated rows.

4. 04

   Restriction and objection - including withdrawal of any consent, with effect for the future.

5. 05

   Data portability - a machine-readable export, where the GDPR grants it.

6. 06

   Complaint - to the Swiss FDPIC, or to your local supervisory authority if you are in the EU/EEA.

Write to the address above, giving the email address on your account so we can identify you. There is no automated decision-making and no profiling.