UIDWatch

Privacy policy

Version of 7 October 2026.

This policy explains which personal data UIDWatch processes, why, where and for how long. The controller is Fabian Sigel, Bruggerstrasse 148, 5400 Baden, Switzerland, reachable at hello@tollwyn.com. It follows the Swiss Federal Act on Data Protection (FADP) and, where it applies, the EU General Data Protection Regulation (GDPR).

What we process, why, and on what basis

  • Account: your email address, a salted hash of your password, when you signed up and which version of the terms you accepted, when you confirmed your address, and your alert settings — to log you in, to send you alerts and account emails such as the confirmation, password reset and trial reminder, and to know which terms apply (performance of the contract, Art. 6(1)(b) GDPR). You need an email address to use UIDWatch; everything else is up to you.
  • Your watchlist: the UIDs you watch with your references and groups, the events we found for them, your webhook addresses with the history of their deliveries, and hashes of your API keys — to provide the service (performance of the contract). References and groups are free text: enter no more about people than you need. To find publications, we send the UIDs, without saying who watches them, in queries to the official gazettes portal of the Swiss Confederation (amtsblattportal.ch, SECO).
  • Gazette publications: publications of the Swiss Official Gazette of Commerce are public. Register publications name people, such as board members, managers, signatories and auditors, and publications about sole proprietorships name their owner. We keep one copy of each publication that concerns a UID on a watchlist and show it to the customers for whose list we found it. For the publications in your list you are the controller and we process them on your behalf (section 8 of the terms).
  • Payment: Stripe processes your email address, payment details, billing address and tax ID; we keep your Stripe customer and subscription numbers, the state of your subscription and the amounts and dates of paid invoices (performance of the contract; for keeping them afterwards, our legitimate interest in meeting Swiss accounting law, Art. 6(1)(f) GDPR).
  • Partner links: when you come to UIDWatch through a link with ?via=…, the sign-up form passes that partner name on, and when you sign up we store it with your account; software that signs up over the API may send one in the field via. It holds nothing but the partner name, and we use it to know which partners bring customers (legitimate interest, Art. 6(1)(f) GDPR). We set no cookie for this.
  • Security and operations: our application logs each request (method, path without parameters, status, duration) and events of the service with internal account and delivery numbers, without IP addresses, email addresses, passwords or keys. Our mail relay logs the recipient address and the delivery status of each email we send and keeps them for at most 30 days. To limit sign-up, login and password reset attempts we count them per IP address in the memory of the application, never on disk; a count applies for at most one hour and is forgotten at the latest when the application restarts. Our web server keeps no access log (legitimate interest in a secure and working service, Art. 6(1)(f) GDPR).
  • Emails to us: when you write to us, we keep your message and address to answer you and to keep a record of the exchange (legitimate interest; for customers, performance of the contract).

Cookies: we set one cookie, only for this site and HttpOnly, Secure and SameSite=Lax: __Host-session keeps you logged in, for 30 days or until you log out, and is needed for the web app. We use no advertising or analytics trackers, sell no data, and make no decisions about you by automated means.

Who receives data, and where

  • Cloudflare, Inc. (USA) runs in front of UIDWatch: it terminates the encrypted connection, passes requests on and filters attacks. It therefore sees every request, including your IP address, in the data centre nearest to you, which can be outside Switzerland and the EU.
  • Application server: Hetzner Online GmbH, Falkenstein, Germany, rented from that provider and administered by the operator.
  • Database: Neon, LLC (a Databricks company, USA), stored in Amazon Web Services region eu-central-1, Frankfurt, Germany; access from the USA is possible.
  • Payments: Stripe Payments Europe, Limited (Ireland), with transfers to Stripe, Inc. (USA). Stripe also processes data as a controller of its own, for example to prevent fraud and to meet its legal duties; see stripe.com/privacy.
  • Email: Infomaniak Network SA (Switzerland) sends our emails and keeps our mailbox.

Data may therefore be processed in Switzerland, Germany, Ireland, the USA and, for Cloudflare, in the country of the data centre that answers you. Switzerland and the EU recognise each other's level of data protection as adequate. Cloudflare, Neon (through Databricks) and Stripe are certified under the Swiss–US and EU–US Data Privacy Frameworks; where these do not cover a transfer, the standard contractual clauses of the European Commission, recognised by the FDPIC, apply.

How long

  • Account, watchlist, events, webhooks and keys stay until you delete your account under Settings; then they are deleted at once. A copy of a gazette publication is deleted together with the last account that has an event for it. Our database provider keeps a history for restoring the database to an earlier point in time; deleted data leave it after at most 30 days.
  • After deletion only a pseudonymous record of the account remains, without your email address: the partner name, its dates and settings (such as sign-up, end of the trial and the version of the terms accepted), the Stripe customer and subscription numbers with the last state of the subscription, and the amounts and dates of paid invoices. We keep them for ten years, as Swiss accounting law requires (Art. 958f CO). Stripe keeps its own records, including your invoices.
  • The application log rotates by size, in three files of 10 MB, and is overwritten as new entries come in; it is also removed whenever a new version starts. The mail relay log is kept for at most 30 days.
  • The session lasts 30 days or until you log out. The counts per IP address apply for at most one hour, are kept in memory only and are forgotten at the latest when the application restarts.
  • Emails to us: as long as the exchange needs it and, for customers, as long as the contract and accounting law require.

Your rights

You may ask what we hold about you and receive it in a common electronic format, have it corrected or deleted, have its processing restricted, and object to processing based on legitimate interest. Much of it you can do yourself in the app, including CSV exports of your list and events; for everything else write to hello@tollwyn.com. We answer within 30 days. You may complain to the Federal Data Protection and Information Commissioner (FDPIC) or, in the EU, to the data protection authority of your country.

Changes

The version published here applies. We tell customers about important changes by email.