Privacy Policy

Last updated: February 2026

The protection of your personal data is a priority for the operator of the MesRecettes.ch service. This privacy policy (hereinafter "the Policy") complies with the Swiss Federal Act on Data Protection (FADP; SR 235.1) and forms an integral part of the Terms of Use.

1. Data controller

DSTec (entreprise individuelle)
David Sissaoui
Bahnhofstrasse 43, 3185 Schmitten (FR), Suisse
Email : admin@dstec.ch
Tél. : +41 71 526 61 16
Website : www.dstec.ch

2. Data collected and legal bases

2.1 Registration data

Legal basis: contract performance (art. 31 para. 2 let. a FADP)

Email address: identification and communication
Password: hashed with secure algorithm (bcrypt)
Display name: service personalisation
Registration date: account management

2.2 Content data

Legal basis: contract performance (art. 31 para. 2 let. a FADP)

Imported recipes: source URL, title, ingredients, instructions
Recipe images: stored on our servers in Switzerland
Personal notes: annotations and modifications
Collections: recipe organisation

2.3 Payment data

Legal basis: contract performance (art. 31 para. 2 let. a FADP)

Premium transactions: processed exclusively by Stripe

The operator never stores your bank details.

Only the following data is recorded: payment date, amount and status.

2.4 Technical data

Legal basis: overriding interest — service security (art. 31 para. 2 FADP)

Login logs: IP address, date/time, browser
Session cookies: maintaining connection (PHP session cookie only)
Activity history: for technical support and prevention of abuse

3. Data retention

Data type	Duration	Justification
Active account	As long as the account exists	Service provision
Deleted account	30 days then permanent deletion	Recovery period
Login logs	12 months maximum	Security and technical support
Payment data	10 years	Legal obligation (Swiss tax law)

4. Sharing with third parties

4.1 Essential services

Infomaniak (Hosting — Switzerland)

Data transmitted: all service data
Location: Geneva, Switzerland
Legal basis: contract performance (art. 31 para. 2 let. a FADP)

Stripe (Payments — USA/Europe)

Data transmitted: payment data for Premium users only
Location: Europe (EU infrastructure) and USA (headquarters)
Legal basis: contract performance (art. 31 para. 2 let. a FADP)
Safeguards: standard contractual clauses (art. 16 para. 2 let. d FADP)

4.2 Advertising services (free users only)

Google AdSense (USA)

Data transmitted: advertising cookies, anonymised IP address
Location: USA (cross-border transfer)
Legal basis: legitimate interest (service funding)
Safeguards: standard contractual clauses (art. 16 para. 2 let. d FADP)
Opt-out: upgrade to Premium account (CHF 4.90, one-time payment)

Premium users are not subject to any third-party advertising service.

5. International transfers

Hosting: exclusively in Switzerland (Infomaniak)
Payments: Stripe (EU infrastructure + USA headquarters with safeguards)
Advertising: Google AdSense (USA with standard contractual clauses)

All transfers outside Switzerland are covered by appropriate safeguards in accordance with art. 16-17 FADP.

6. Cookies and similar technologies

6.1 Essential cookies (mandatory)

PHPSESSID: session cookie to maintain your connection.
Duration: session (expires when browser closes).
This cookie cannot be refused: it is required for the service to function.

6.2 Advertising cookies (free users only)

Google AdSense: third-party cookies for personalised advertising.
Opt-out available via: adssettings.google.com
Alternative: upgrade to Premium (no advertising cookies).

6.3 No tracking cookies

The operator uses no analytics tools (no Google Analytics, Facebook Pixel, etc.).

7. Data security

The operator implements the following technical and organisational measures (art. 8 FADP):

Encryption: HTTPS (TLS 1.3) for all communications
Passwords: bcrypt hashing with salt
Servers: hosted in Switzerland (Infomaniak, Geneva), restricted and logged access
Backups: daily, encrypted, stored in Switzerland
Monitoring: security monitoring and automatic alerts
Updates: security patches applied promptly

8. Your rights (art. 25-29 FADP)

Under the Federal Act on Data Protection, you have the following rights:

8.1 Right of access (art. 25 FADP)

You may request a copy of all your personal data processed by the operator.

8.2 Right to rectification

You may correct your inaccurate data directly via the Settings page.

8.3 Right to erasure

You may permanently delete your account and all your data. A technical period of 30 days applies.

8.4 Right to data disclosure (art. 28 FADP)

You may export your recipes in JSON format via the Settings page.

8.5 Right to object

You may object to the processing of your data on legitimate grounds.

8.6 Right to restriction

You may request the temporary restriction of the processing of your data.

To exercise your rights: send your request to admin@dstec.ch with proof of identity.
Response time: 30 days maximum (art. 25 para. 6 FADP).

9. Changes to this Policy

The operator reserves the right to modify this Policy. In the event of a substantial change:

Notification by email at least 30 days before entry into force
Publication of the new version on this page
Update date visible at the top of the page

Continued use of the service after the modifications take effect constitutes acceptance of the new Policy.

10. Complaints (art. 49 FADP)

If you believe the processing of your data violates the FADP, you may file a complaint with:

Federal Data Protection and Information Commissioner (FDPIC)
Feldeggweg 1, 3003 Berne, Switzerland
www.edoeb.admin.ch

11. Contact

For any questions regarding the protection of your personal data:

Email : admin@dstec.ch
Response time: 5 working days maximum.

You can also consult our Terms of Use.

DSTec (entreprise individuelle)
David Sissaoui
Bahnhofstrasse 43, 3185 Schmitten (FR), Suisse
Tél. : +41 71 526 61 16

Last updated: February 2026