Privacy notice
Who is responsible
Vladyslav Kvochkin, Rue de Rome 9, 1700 Fribourg, Switzerland. Questions about privacy: hello@stordax.com.
What this is about
This client area is where we finish your website with you and then run it: you see where things stand, confirm your details, ask for changes and write to us. This notice describes what happens to your data along the way. Your own website has its own privacy notice.
What data we process
Your account: your email address, your password (only as a cryptographic hash, never in clear text) and the language you chose. Whoever arrives by a personal link has no account; we then store only that link, hashed.
Your order: the details about your business that appear on your website and that you confirm with us — opening hours, prices, services, address, contact details — and your choice of web address.
Your messages and change requests to us, with their time, and what we did in response.
Optional: an email address where we may let you know when we have done something for you.
Technical: we hold your IP address briefly in memory to limit abuse (too many sign-in attempts, say). We do not store it and keep no access logs containing personal data.
What for
To fulfil our agreement with you: to finish your website, put it online and run it. To tell you when something is done — only if you have given us an address for that. To be able to show which details you confirmed. And to run the client area securely.
We build no profiles, do not analyse your behaviour and sell no data.
Cookies
One cookie, and only because there is no other way: a session cookie (ff_client or ff_account) that keeps you signed in. It is HttpOnly, is sent only to our server and expires after 30 days. No analytics, advertising or third-party cookies. The typeface is hosted locally; no third-party content is loaded.
Who else sees data
Hosting: this client area and its database run at Contabo GmbH, Deutschland.
Email: we send notifications through Resend, Inc., USA.
Payments: if you pay by card, Stripe handles the payment and receives your email address and your payment details. We never see your card number. Stripe also processes this data in the USA.
Signing in with Google: if you sign in with your Google account, Google passes us your email address and an identifier for your account — nothing more. Google learns that you sign in here, and also processes this data in the USA.
Domain check: when you search for a web address, we send the name you typed to the responsible registry (SWITCH for .ch, Verisign for .com) to see whether it is free. No personal data is transmitted.
When an account is created, Cloudflare Turnstile protects us from automated sign-ups. Cloudflare, Inc. (USA) then processes technical data from your browser. Cloudflare is subject to the Swiss-U.S. Data Privacy Framework.
Beyond that we pass your data to nobody — unless the law obliges us to.
For how long
For as long as our agreement runs. When it ends we delete your sign-in data and hand you everything that belongs to your website. The record of the details you confirmed and the contract data we keep for as long as statutory retention duties require. Backups of the database are made daily and deleted after 30 days.
Your rights
You can at any time ask what data we hold about you, have it corrected or deleted, and ask for it to be handed over. A message to hello@stordax.com is enough. You may also contact the Federal Data Protection and Information Commissioner (FDPIC).
Status
This notice applies from 2026-09-16. If we change it, the new version appears here.