Privacy policy

Effective date: September 17, 2026, Version 1.1

Alessandro Ruggiero (hereinafter "ViziRealm") places utmost importance on the protection of your personal data. This privacy policy describes how we collect, use and protect your data, in accordance with the Swiss Federal Act on Data Protection (nFADP) and the General Data Protection Regulation (GDPR) of the European Union.

1. Data controller

Ruggiero Alessandro
Le Pommey 22, 1527 Villeneuve Fr, Fribourg, Switzerland
Email: contact@vizirealm.com

2. Data collected

2.1 Account data

When creating your account, we collect:

  • Email address (login identifier)
  • Username
  • Password (encrypted, never stored in plaintext)
  • Language preference
  • Account creation date and time
  • Legal consents with timestamp and IP address

Legal basis: contract performance.

2.2 Payment data

Payments are processed by Stripe, Inc. We do not store any banking data (card number, IBAN, etc.) on our servers. We only retain Stripe identifiers (customer ID, subscription ID) necessary for managing your subscription.

Legal basis: contract performance.

2.3 Technical data

  • IP address during login and sensitive operations
  • Technical logs of hosted servers (starts, stops, errors)

Legal basis: legitimate interest (service security and stability).

2.4 Cookies and session data

We use a single necessary cookie: a secure HttpOnly cookie (vizirealm_token) that keeps you signed in and is strictly necessary for the service to work. Your display preferences (language, currency) and your choice regarding analytics and advertising cookies (section 2.5) are kept in your browser's local storage (localStorage): they stay on your device and are not sent to us.

Legal basis: legitimate interest (service operation).

2.5 Audience measurement and advertising (Google Analytics, Google Ads)

Only if you consent, we use Google Analytics 4 and Google Ads, two services provided by Google Ireland Limited. Their purposes are to measure the site's audience, evaluate the effectiveness of our advertising campaigns and, where applicable, show you more relevant ViziRealm ads.

  • Analytics (Google Analytics): pages viewed, visit duration and source (search engine, ad, link), device and browser type, approximate location (country, city), associated with analytics identifiers.
  • Advertising (Google Ads): ad click identifiers and conversion data (sign-ups, purchases, amounts and order references) to measure the results of our ads.

These processes may involve sending Google data needed to measure conversions or deliver advertising. The data involved depends on the features actually enabled and the information available. We do not send complete payment card or banking details to Google. Google processes the data under its own privacy policy (policies.google.com/privacy) and the applicable Google Ads terms, including its data processing terms where applicable.

You make your choice by category in the cookie banner shown on your first visit, and you can change it at any time using the “Manage cookies” link at the bottom of the page. Refusing consent does not affect your access to the site or our services. Where required, non-essential analytics or advertising cookies must not be set without the necessary consent. If Google Consent Mode is enabled, cookieless signals may be sent to Google depending on its configuration and in accordance with applicable rules. Withdrawing consent stops the relevant processing and, where technically possible, deletes the associated cookies.

Legal basis: your consent where required, which you may withdraw at any time. Processing strictly necessary for service security and operation relies on its own legal basis.

3. Sub-processors and recipients

Your data may be shared with the following sub-processors, strictly within the scope of the service:

  • Stripe, Inc. (USA), for payment processing. Transfers are governed by EU Standard Contractual Clauses (SCC).
  • OVHcloud (France), for hosting our server infrastructure.
  • Pterodactyl, self-hosted on our infrastructure, for server management.
  • Resend, Inc. (USA), for sending the service's emails: account verification, password reset, notifications, payment receipts and contact form messages. It receives your email address, your username and the content of these messages. Transfers are governed by EU Standard Contractual Clauses (SCC).
  • Google Ireland Limited (Ireland) and Google LLC (USA), for audience measurement and advertising campaigns, including conversion measurement and, if enabled, enhanced conversions and Customer Match, where the required consent and other applicable conditions are met. Transfers to the United States are subject to the Data Privacy Framework (EU-US and Swiss-US), where applicable, and/or Standard Contractual Clauses, as appropriate.

Your personal data is never sold to third parties.

4. Retention period

  • Account data: retained as long as the account is active, or until deletion is requested by the user.
  • Billing data: retained 10 years in accordance with Swiss accounting obligations.
  • Free server data: deleted upon expiration of the retention period set at server creation.
  • Legal consents: retained for the duration of the account + 10 years (proof of compliance).
  • Audience measurement and advertising: Google cookies kept for 13 months at most, Google Analytics data kept for 14 months at most. Your choice in the cookie banner is kept for 6 months, then asked again.

5. Your rights

In accordance with the nFADP and GDPR, you have the following rights:

  • Right of access: obtain a copy of your personal data
  • Right of rectification: correct your information (email, username) from your account
  • Right to erasure: request deletion of your account and data
  • Right to data portability: receive your data in a structured format
  • Right to object: object to processing based on legitimate interest

To exercise your rights, contact us at: support@vizirealm.com.
We will respond within 30 days. You also have the right to lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC) or the data protection authority of your country of residence.

6. Security

We implement appropriate technical and organizational measures to protect your data against unauthorized access, loss, destruction or disclosure: TLS encryption, HttpOnly cookies, encrypted passwords, restricted access to production data.

7. Changes

We may update this policy at any time. In case of substantial changes, we will notify you by email. Continued use of the service after notification constitutes acceptance of the updated version.

8. Contact

For any question regarding this policy: support@vizirealm.com