Privacy policy

Controller

The person named in the imprint, acting privately. For any question about your data, write to the address given there.

What we collect

When you book: name, phone number, email and the booking details — bike, date, time, chosen options and indicative price. From shops: the shop's details and those of its contact person.

We ask for no identity documents and no payment details: nothing is paid online.

What it is used for

So that the shop can prepare your bike and recognise you by your code, and so that we can account for the commission on completed sales. No advertising, no selling of data.

Who receives it

The shop holding the bike, which sees only its own bookings. Beyond that, only the technical providers listed below, who process data on our behalf.

Shop and administration accounts

Whoever runs a shop has an account: the contact person's name, an email address and a password. We do not keep the password itself — the database holds only its hash (scrypt), from which the password cannot be recovered; nobody can read it back, ourselves included. We keep the date of the last sign-in, because that is the only way to notice a sign-in that was not you.

The links in our emails — address confirmation, password reset — and the administration's six-digit code are likewise stored only as a hash, work once, and are deleted as soon as they are used or expire: twenty-four hours for the confirmation, one hour for the password, ten minutes for the code.

What the administration does — who approved or suspended a shop, and when — is kept in a log: on a platform holding other people's data, who did what has to be on the record.

Alerts for new listings

If you ask to be alerted, we store your email address and your search filters. Nothing is sent until you confirm by clicking a link; after that, at most one email a day, each with a one-click link to switch the alert off. Alerts expire by themselves after six months.

Where the site runs

It is hosted by Vercel (Vercel Inc., USA) and served from their Frankfurt servers; their technical logs see your IP address, the page requested and your browser type, for as long as that is needed to run and protect the service.

Booking data lives in a PostgreSQL database at Neon (Neon Inc., USA), also in Frankfurt, and the photos uploaded by shops in Vercel's file storage. Both process the data on our behalf as processors; the transfer to the USA relies on the standard contractual clauses in their agreements.

Providers

Email delivery: Resend (Resend Inc., USA), as processor; the transfer to the USA relies on the standard contractual clauses in that agreement.

Map: tiles from OpenStreetMap (OpenStreetMap Foundation). When you scroll down to the map, your browser requests them and their servers receive your IP address. Nothing is loaded before that. Shop locations are geocoded once from our own server via geo.admin.ch (Swiss Confederation).

Assistant and text search, where enabled: Anthropic (USA) processes the text you type on our behalf to generate the answer. We store only the search text and the number of results, with no link to a person.

How long we keep it

Bookings that lead nowhere and expired codes: twelve months. Bookings with a confirmed code, and the commission records derived from them: ten years, because Swiss law requires accounting records to be kept for that long. Alerts: until expiry plus one month.

Account data — shop or administration — stays as long as the account exists, and is deleted within 30 days of its closure, except for what accounting rules require us to keep for ten years. The administration log: 24 months.

Cookies and data stored in your browser

If you browse the site without signing in, you get no cookies at all — which is why there is no banner: there is nothing to accept.

The only three cookies appear when someone signs in with a password: «sessione_negozio» for the shop panel, «sessione_admin» for the administration, and «admin_attesa», which lasts a quarter of an hour and is used only between the password and the six-digit code. The first two keep the session open for eight hours, are signed, readable only by the server (httpOnly), limited to this site (SameSite=Lax) and, in production, sent only over a secure connection. They are strictly necessary: without them signing in does not work.

No tracking, analytics or advertising cookies, and nothing is kept in your browser's storage (no localStorage, no sessionStorage).

What leaves your browser

One thing only: the map tiles, and only on the rental pages, and only once you scroll down to the map. Everything else — text, bike photos, fonts, site code — comes from our own servers; the fonts are not loaded from Google and no libraries are pulled from external services.

The same goes for the assistant: your browser only talks to us. We are the ones contacting Anthropic, Resend and geo.admin.ch, from our server.

IP address and abuse

To stop anyone flooding the site with fake bookings or thousands of questions to the assistant, we keep your IP address in memory with a request counter: a few minutes for the short-term limit, until the end of the day for the number of assistant messages. It is not written to the database, it disappears when the server restarts and it is not linked to your bookings.

Your rights

You may ask at any time for access, correction or deletion; we reply within 30 days. You can cancel a booking yourself using the link in your confirmation email. Complaints can be addressed to the Swiss Federal Data Protection and Information Commissioner (FDPIC).