Legal
Privacy Policy
Last updated: October 2026
The short version: this site collects as little as possible. No advertising pixels, no cross-site tracking. We use one analytics tool, PostHog, to see how the site is used so we can make it better. Data is only processed where it's needed to run the site, improve it, and deliver what you buy. Nothing is ever sold.
Who is responsible
Janine Tobler, sole proprietorship under Swiss law, Dorfstrasse 15, 9621 Oberhelfenschwil, Switzerland. For anything privacy-related, write to toblerjaniine@gmail.com.
This policy follows the Swiss Federal Act on Data Protection (FADP / revDSG). Where the EU GDPR applies to you, the same principles and rights apply.
What we process, and why
When you buy a guide
Checkout and payment run through CheckoutPage (checkoutpage.com), with Stripe as the payment processor. When you order, they process your name, email address, payment details, and order information on our behalf so the purchase can be completed and your download link delivered. Card details go directly to Stripe — we never see them. Purpose: fulfilling your order (performance of contract).
See the privacy policies of CheckoutPage and Stripe for how they handle data.
When you visit the site
This site is hosted by Vercel. Like any web host, Vercel keeps server logs — IP address, browser type, pages requested, timestamps. Purpose: delivering the site and keeping it secure and stable (legitimate interest). Logs are kept only as long as technically needed.
We also use Vercel Web Analytics to understand basic, aggregated website traffic and improve the site. Vercel Web Analytics does not use cookies, does not use persistent visitor IDs, and does not track visitors across different websites. It can process page views, timestamps, referrer, approximate location, device type, browser, and operating system. Query strings and URL fragments are removed before analytics events are sent, and we do not send names, email addresses, order numbers, payment data, or other intentionally personal content through Web Analytics.
We also use Vercel Speed Insights to evaluate anonymized performance statistics and improve the technical user experience. Speed Insights can process Core Web Vitals and technical information such as route or URL, network speed, browser, device type, operating system, country, and measurement time. We use it only for aggregated technical analysis, and we do not send names, email addresses, order numbers, payment data, or other intentionally personal content through Speed Insights. Query strings and URL fragments are removed before Speed Insights events are sent where technically possible.
To improve the site, we use PostHog (PostHog Inc., data hosted in the EU, Frankfurt). PostHog records how visitors use the pages: page views, clicks, how far you scroll, and anonymous session recordings that replay mouse movements, taps and scrolling. Every input field is masked in recordings, so nothing you type is captured. We don't create personal profiles and don't link this data to your name or email. PostHog stores a pseudonymous ID in a first-party cookie and in your browser's local storage to recognize a visit across pages. Typical data: pages visited, clicks, scroll depth, referrer, approximate location (from the IP address, which isn't stored in full), device, browser and operating system. Purpose: understanding which parts of the site help visitors and which don't (legitimate interest). If your browser sends a "Do Not Track" signal, PostHog collects nothing. You can also block or delete the cookie in your browser at any time. See PostHog's privacy policy.
When you apply for coaching
The coaching application runs through Google Forms. If you apply, Google processes the answers you submit — such as your name, contact details, and information about your training, goals, and health — on our behalf so we can review your application and get back to you. Purpose: handling your application (steps prior to entering a contract). Please share health details only to the extent you are comfortable with. Applications are kept only as long as needed to decide on and follow up your application. Google may process this data in the United States; Google's privacy policy applies to the form itself.
Fonts
Fonts are loaded from the Google Fonts CDN. When a page loads, your browser requests the font files from Google's servers, which transmits your IP address to Google. Purpose: consistent, fast typography (legitimate interest). Google's privacy policy applies to that request: policies.google.com/privacy.
When you email us
If you write to us, we keep your message and address as long as needed to answer you and handle any follow-up.
What we don't do
- No cookies from this site itself, except the PostHog analytics cookie described above. On the two checkout-enabled sales pages, our payment providers (CheckoutPage and Stripe) set cookies needed to process purchases securely and prevent fraud — see their privacy policies.
- No advertising or cross-site visitor tracking.
- No advertising or tracking pixels.
- No purchase tracking — what you buy stays with CheckoutPage and Stripe.
- No selling or renting of personal data — ever.
Reserved — not currently in use: we may add the Meta (Facebook) Pixel in the future to measure advertising. It is not active today. If that changes, this policy will be updated first and the pixel will be disclosed here, including its purpose and your options.
Where your data goes
Our service providers (CheckoutPage, Stripe, Vercel, Google, PostHog) may process data outside Switzerland, including in the United States, under recognized safeguards such as adequacy decisions or standard contractual clauses. Beyond these providers, your data is not shared with anyone unless the law requires it.
How long we keep data
Only as long as needed for the purpose it was collected for. Order and invoice records are kept as long as Swiss commercial and tax law requires; after that, they are deleted.
Your rights
You can, at any time:
- ask what data we hold about you (access),
- have incorrect data corrected,
- have your data deleted, where no legal retention duty applies,
- object to a specific processing.
To exercise any of these, email toblerjaniine@gmail.com. You can also complain to the Swiss Federal Data Protection and Information Commissioner (FDPIC).
Governing law
Swiss law governs this policy. It may be updated when the site or our tools change; the current version is always the one published here.