Privacy policy

Updated: 2 September 2026

In plain terms: no advertising, no trackers, no resale, no profiling. We sell websites, not data. But two providers do get to see something on every visit: our host and Google (the site's typefaces, and the bot filter on the form). This page says exactly what, why, for how long, and what you can demand from us.

1. Who is responsible

This site is operated by PrestoWeb, a web-design service for Swiss businesses and self-employed people, based in Geneva. We decide what is collected and why, which makes us the controller under the Swiss Federal Act on Data Protection (FADP, revised).

Contact for any data protection matter: contact@prestoweb.ch. Full details in the legal notice.

2. What we collect, and why

Nothing is collected behind your back, and nothing is collected "just in case". This is the complete list.

WhenWhat we receiveWhat for
You visit a pageStandard server logs: IP address, date and time, page requested, browserRunning and protecting the site. Purged automatically by the host.
Quote request formYour name, your e-mail, your phone number if you give one, and a description of your projectReplying to you, pricing your project, supporting you if you hire us.
Submitting the formThe server records the send: timestamp, IP address, e-mail address, message content and the outcome of the deliveryFinding a lost message, diagnosing a delivery failure, showing a request did arrive. See section 4.
Submitting the formThe bot filter logs the IP address, a timestamp and the outcome of the checkBlocking automated submissions. See section 3.
You become a clientWhatever the engagement requires: billing details, content you entrust to us, technical accessBuilding the site, invoicing, providing maintenance.

We run no audience analytics, no ad targeting, no profiling: no Google Analytics, no Facebook pixel, no measurement tool of any kind. No data is sold, rented or passed to a third party for commercial or advertising purposes.

One exception deserves to be named: the site's typefaces are loaded from Google Fonts. Your browser therefore fetches them from Google, which receives your IP address in the process — on every page, not only the one carrying the form. No cookie is set for this and we derive nothing from it, but we would rather write it down than let you believe this site talks to nobody.

3. The bot filter (Google reCAPTCHA)

Since 31 August 2026 the quote request form has been protected by Google reCAPTCHA v2 — the "I'm not a robot" checkbox. We added it because the form was receiving automated spam.

This has to be said plainly: that service does see things. To tell a human from a program, reCAPTCHA analyses, on the form page, your IP address, information about your browser and device, and the way you interact with the page (mouse movement, typing, time spent). It also sets its own cookies. Google processes this, not us: all we get back is the verdict, "human" or "bot".

If you would rather avoid it, write to us directly at contact@prestoweb.ch — a quote request by e-mail counts exactly the same.

Since 2 April 2026, Google acts as a processor for reCAPTCHA: it handles this data on our behalf and on our instructions, no longer for its own account. Details on Google's side: privacy policy and terms of service.

4. What happens to your request

The form sends us your message by e-mail and sends you an acknowledgement at the address you gave. Both go through Infomaniak's encrypted mail server.

The server keeps a written trace of it. Let us say so plainly: a log keeps, for every send, the timestamp, the IP address, the e-mail address, the message content and the delivery outcome. That log is reachable neither from the web nor by anyone outside PrestoWeb; it exists to find a message that did not arrive. It follows the same retention period as the request itself (section 7), and you can ask for it to be erased.

One technical limit worth knowing: the form accepts only one submission every eight seconds per IP address, and carries an invisible trap field aimed at robots. A genuine submission is never affected.

5. Cookies

No advertising cookies, no analytics cookies, no profiling. What you may come across:

We show no consent banner: none of these cookies is used to track you for advertising or statistical purposes. You can block them in your browser — the form will then stop working, the rest of the site will not.

6. Who else sees your data

Nobody beyond the providers strictly needed. Here they are, in full:

ProviderRoleWhere
Infomaniak Network SAHosting of the site and the mailGeneva, Switzerland
Google Ireland Ltd / Google LLCreCAPTCHA bot filter, and typefaces (Google Fonts)Ireland, United States
StripePaying an invoice online, if you choose that routeIreland, United States
TWINT AGPaying an invoice by TWINT, if you choose that routeSwitzerland

Your card details, where applicable, are entered at the payment provider and go straight to it: PrestoWeb never sees your card number and stores it nowhere.

Transfers abroad. Google and Stripe involve transferring data outside Switzerland, in particular to the United States. Since 15 September 2024 the Swiss Federal Council recognises (Annex 1 to the Data Protection Ordinance) that US companies certified under the Swiss–U.S. Data Privacy Framework provide an adequate level of protection within the meaning of art. 16 FADP. These transfers take place on that basis, failing which on standard contractual clauses.

7. How long we keep what

DataRetention
Server logsPer the host's policy, a few weeks
Bot filter log12 months
Quote requests without follow-up, and the matching send log12 months after the last exchange
Technical e-mails (support, maintenance)24 months
Client files, contracts and invoices10 years — statutory retention period (art. 958f CO)

8. Your rights

Swiss data protection law gives you the right, at any time and free of charge, to:

One address for all of it: contact@prestoweb.ch. We answer within 30 days. We may ask you to prove your identity — which is precisely there to protect you.

If our answer does not satisfy you, you may turn to the Federal Data Protection and Information Commissioner (FDPIC), Feldeggweg 1, 3003 Bern, edoeb.admin.ch, or to the civil courts.

9. Security

The site is served entirely over HTTPS. Messages go through Infomaniak's encrypted SMTP. Technical files (logs, configuration, backups) are out of reach from the web. No measure is perfect: should an incident affect your data and pose a risk to you, we would contact you and report the case to the FDPIC, as art. 24 FADP requires.

10. Changes

This policy changes as the site changes. The date at the top gives the last revision. The 2 September 2026 update sets out the bot filter, names Google Fonts, discloses the form's send log, lists the providers with their country and spells out your rights.

11. Contact

A question about this page, or a request to make? contact@prestoweb.ch