← Stone

Privacy

Who is responsible

Noah Steiner, Stone, Hägelerstrasse 11, 5400 Baden, Switzerland. Email: hello@getyourstone.com.

What this website collects

Your email address, if you join the list or reserve a Stone, with the time you joined, and a first name if you give one. The first name is public: it is shown on the website with your strand (a numbered strand of the rope), for anyone to see. Leave the field empty and your strand says “Anonymous”. Your email address is never shown. It is used to tell you about your reservation (when your card is charged and when your Stone ships), plus occasional build updates. Before we send you anything else, we ask you to confirm your address with a link (double opt-in); we keep the time of your confirmation as proof of your consent. Every email has a link to leave the list.

If you reserve a Stone, also how many you reserved, whether it ships within Switzerland or abroad, and when you saved your card. Your shipping address is kept at Stripe with your card. You enter your card on Stripe's payment page, not on ours: Stripe keeps the card, and we only keep Stripe's reference to you and to the card, so we can charge it as the reservation terms say. Each Stone you reserve is a cut strand on the website, shown with your first name if you gave one.

Technical data. To deliver the pages and protect the site from abuse, the host processes technical data such as your IP address, the time and the page you opened. We do not keep access logs ourselves, and we do not store your IP address with your email address.

No cookies, no tracking. The site sets no cookies, loads nothing from third parties and uses no advertising or tracking tools. Stripe's payment page, where you save your card, is Stripe's own and follows Stripe's privacy policy. The fonts are served from this website itself.

Legal basis

The list rests on your consent (GDPR Art. 6(1)(a)), which you can withdraw at any time. A reservation rests on our contract with you (GDPR Art. 6(1)(b)). Delivering and protecting the site rests on our legitimate interest in a working, secure website (GDPR Art. 6(1)(f)).

Who else processes the data

Cloudflare, Inc. (USA) hosts the website, stores the list in a database in Europe and will send the emails. Cloudflare is certified under the EU–US and Swiss–US Data Privacy Frameworks and is additionally bound by the EU standard contractual clauses.

Stripe Payments Europe, Ltd. (Ireland) takes the card payments and keeps the saved cards. Stripe is certified under the EU–US and Swiss–US Data Privacy Frameworks. Its privacy policy: stripe.com/privacy.

How long we keep it

Your email stays on the list until you leave it, or until Stone stops. If you leave, your address is deleted, and so is your saved card at Stripe. Records of payments are kept as long as Swiss law requires (10 years).

Your rights

You can ask what we store about you, have it corrected or deleted, restrict or object to its use, and take it with you. Write to hello@getyourstone.com. You can also complain to the Swiss Federal Data Protection and Information Commissioner (FDPIC) or to the data-protection authority in your EU country.