Privacy policy
This platform is built to know as little about you as possible — and to protect that little as well as possible. No cookies, no tracking, no advertising, and your exact location leaves the system at exactly one point: after a mutually confirmed match, with an audit log entry.
Controller
Catering & Event Services GmbH, Zürich, Switzerland Email: [email protected]
What data we process
Account: email address, password (stored only as a bcrypt hash), and — if you choose — a phone number for verification via SMS code.
Listings: the details of your need or offer — category, quantity, time window and location. The location is stored twice: exact (only for confirmed counterparts) and coarsened to a 1–2 km grid (for everything public).
Matches: proposals, confirmations, declines, and the disclosure log (when which exact location was released to whom).
Moderation: system decisions in crisis mode (lowered verification) are logged with a follow-up review deadline.
Technical: server logs (IP address, timestamp, requested path) for operational security, plus short-lived abuse-prevention counters (rate limits).
What we deliberately do not do
No cookies (sign-in uses your browser’s localStorage), no analytics or advertising tracking, no sharing or selling of data, no profiling.
Never public: your exact location, a distance in metres, or a numeric comparison score — only a coarsened circle on the map and rough distance bands. Free-text notes are not visible to third parties either.
No automated decision with legal effect: the system proposes matches; only humans confirm them.
Purposes and legal bases
We process data to provide the platform (Art. 6(1)(b) GDPR), to prevent abuse and fraud (Art. 6(1)(f) GDPR) and — in a disaster — to protect vital interests (Art. 6(1)(d) GDPR). The Swiss Data Protection Act (revFADP) applies in addition.
Recipients and processors
Hosting: Hetzner Online GmbH (Germany/EU). Network and attack protection: Cloudflare, Inc. (transfers to third countries possible, safeguarded by EU standard contractual clauses). SMS verification codes are delivered via an SMS delivery provider.
Your exact location and phone number are shown exclusively to the confirmed counterpart of a match — to no one else.
Retention
Account data is kept until you delete your account. Expired listings and matches are retained on a limited basis to keep crisis decisions auditable. Server logs and rate-limit counters are short-lived and rotated or discarded automatically.
Your rights
You have the right to access, rectification, erasure, restriction of processing, data portability and objection. Contact [email protected]. You may also lodge a complaint with a supervisory authority — in Switzerland the FDPIC, in the EU the authority of your member state.