Privacy

Controller and scope

The project operator listed below is responsible for processing personal data on swiss-sdr.ch, openwebrx.ch and kiwisdr.ch. This policy covers our platform. External receivers and linked websites have their own policies.

Website operation and security

When you request a page, the infrastructure processes necessary connection data such as your IP address, request time, requested address and browser information. This supports page delivery, error investigation and protection against attacks.

To limit abusive form requests, the application stores a hashed connection reference with a short-lived counter. Expired rate-limit data is removed automatically. Only authorised people can access administrative functions.

Accounts, contact and publications

For sign-in, email verification and receiver management, we process account data, security information and submitted content. Your account email is not public. Messages and an optional reply address are used to handle your enquiry.

Public operator profiles and precise locations are optional. Published receiver information is visible on the websites. Approximate positions protect private sites; exact positions require corresponding permission.

Processing supports the functions you request, handling enquiries and secure operation. Optional statistics require your consent.

Cookies and browser storage

Necessary sign-in cookies apply to each website and expire after one day. Language, appearance, favourites and comparisons may be saved locally in your browser. They are not sent to us as usage statistics.

Your cookie choice is saved for 180 days in this browser on the relevant domain. You can reject statistics and continue using the website. Cookie settings let you change or withdraw consent at any time.

Providers, maps and external links

Hosting and email delivery may be handled by the providers listed below. Only data needed for the respective purpose is processed. Opening an external receiver, the Facebook group or another link connects your browser to the relevant provider.

The map uses no external map tiles by default. If a map provider is enabled, your browser loads its tiles and sends connection data to that provider. The map identifies the provider in its attribution.

Retention and your rights

Account data is retained to manage your account. Expired sessions and one-time tokens are removed automatically. Availability measurements are deleted after 90 days. Enquiries, editorial evidence and protected backups are retained for their purposes and any applicable legal duties.

Your account supports data export, session revocation and account deletion. You can ask the controller to provide access to, correct or delete your personal data. Legal retention duties and legitimate interests may prevent complete deletion of certain records.

You can contact the Federal Data Protection and Information Commissioner (FDPIC). Where the GDPR applies to processing, its corresponding rights also apply with the competent supervisory authority.

Optional statistics with Google Analytics

When the feature is enabled and you consent, Google Analytics 4 analyses visits and public page views. The provider is Google Ireland Limited, Ireland; Google LLC may also process data in the USA. This includes cookie identifiers and browser, device and usage information.

Before consent, we load no Google Analytics code and send no statistics to Google. Advertising personalisation and Google Signals are disabled. Account and administrative pages are excluded. Our integration does not transmit form content, account emails, URL parameters or password-reset tokens as page views.

Analytics cookies are set for no more than 180 days. Retention of reports is managed in the Google Analytics account. Withdrawing consent stops the integration and removes its Analytics cookies from this browser. Processing that has already taken place is not retrospectively undone.

Google: privacy policy ↗ · Google: data processing ↗

Storage at a glance