Privacy policy

Which law applies

Straintest GmbH is established in Switzerland, so the Swiss Federal Act on Data Protection (FADP) governs what we do with personal data.

Because this site is offered to people in the European Union, in their languages and with prices in euros, the GDPR also applies to it under Article 3(2). Where the two differ we follow whichever gives you the stronger protection, and the rights set out below are available to you under both.

Who is responsible

The controller for the processing described here is:

• Straintest GmbH
• Hagenholzstrasse 62, 8050 Zurich, Switzerland
• Email: support@straintest.co

The short version

This site carries no advertising and no advertising cookies, and we never sell or share data with anyone for marketing.

We do record how the site is used, so we can see where it confuses people. What you type is never captured, and you can stop the recording at any time — how to do that is set out below.

Visiting the site

The site is delivered by Cloudflare. Like any web server it processes the technical data needed to send you a page and keep the service available and secure: your IP address, the page requested, the time of the request, and the browser and operating system your request announces.

We use this only to deliver the site, keep it working and defend it against abuse. We do not use it to build a profile of you, and we do not combine it with anything else.

Legal basis: our legitimate interest in operating a website that is available and not under attack (Article 6(1)(f) GDPR; Article 31 FADP).

The contact form

When you send an enquiry through the contact form, it transmits exactly the following and nothing more:

• the kind of enquiry you chose (demo, contact, upgrade or order)
• your email address
• your company name
• your telephone number, if you chose to give one
• your description of the project, where the form offers that field
• the language version and the page you were on when you wrote

What happens to an enquiry

The submission reaches us as an email so that a person can answer it. Your address is set as the reply address, so replying to that email reaches you directly. Nothing you type into the form is stored in a database on this site — the site has no database.

To stop the form being used to send bulk mail, the server briefly counts requests per IP address. The address is reduced to a short irreversible fingerprint before it is counted, the counter holds a number and nothing else, and it is discarded within fifteen minutes. Your IP address is never included in the email we receive.

Legal basis: performance of a contract or steps taken before entering into one, where your enquiry concerns that (Article 6(1)(b) GDPR); otherwise our legitimate interest in answering people who write to us and in not having our mail system abused (Article 6(1)(f) GDPR; Article 31 FADP).

Cookies

Two cookies are always set. Neither is used for advertising or analysis, and for that reason neither requires your consent:

• straintest_locale — records the language and market you selected, so the site opens in that language next time. It is written only when you actively change the language, holds nothing but a value such as "en-eu", and expires after one year.
• __cf_bm — set by Cloudflare to tell human visitors from automated traffic. It is a security measure, expires after about half an hour, and is described in Cloudflare's own documentation.

Session recording

We record how this site is used so that we can see where it is slow or confusing. Recording begins when the page loads.

OpenReplay records the shape of your visit: the pages you open, where you click and scroll, how long things take, and browser errors. That is what lets us find where the site is slow or confusing without having to ask anyone.

What it does not record: anything you type. Form fields are ignored outright, and text that looks like an email address or a number is masked before it leaves your browser. Your enquiry, your company name and your project description never reach a recording.

If your browser sends a Do Not Track signal we honour it and record nothing, even after a yes.

Legal basis: our legitimate interest in understanding how our own website performs (Article 6(1)(f) GDPR; Article 31 FADP). You may object at any time — turn on Do Not Track in your browser, or write to support@straintest.co and we will exclude you. Either stops further recording; neither undoes recordings already made.

Recordings are held by OpenReplay on our behalf under a data processing agreement and are deleted on their standard retention schedule.

Who else processes this data

We keep the number of parties involved as small as the site allows. Two companies process personal data on our behalf, each under a data processing agreement:

• Cloudflare — hosting, content delivery and protection against attack. Processes the technical data described above.
• Resend — delivery of the email generated by the contact form. Processes what you typed into the form.
• OpenReplay — session recording. Processes the interaction data described above.

Where the data goes

Switzerland is recognised by the European Commission as offering an adequate level of data protection, so personal data reaching us here from the EU needs no further safeguard.

Both providers above are established in the United States and may process data there or in other countries. Those transfers rest on the safeguards in their agreements with us — the European Commission's Standard Contractual Clauses and the equivalent Swiss arrangements, together with the providers' own certifications where these apply. You may ask us for details of the safeguards in place, at the address above.

How long we keep it

Enquiries stay in our mailbox for as long as we need them to deal with your request and to meet any retention period the law imposes on business correspondence, after which they are deleted. The abuse counters described above expire within fifteen minutes. Server logs held by our hosting provider are kept for its standard retention period and are not copied anywhere by us.

Your rights

You may ask us for a copy of the personal data we hold about you, ask us to correct or delete it, ask us to restrict how we use it, and ask for it in a portable form. Where we rely on legitimate interest, you may object to the processing at any time.

To exercise any of these, write to support@straintest.co. We answer within one month.

Complaints

If you think we have handled your data wrongly we would rather hear from you first, but you may complain to a supervisory authority at any time.

• Federal Data Protection and Information Commissioner (FDPIC) – https://www.edoeb.admin.ch
• If you are in the European Union you may instead complain to the data protection authority of the country where you live or work, or where you believe the problem occurred.

Is anything automated?

No. We take no decisions about you by automated means. Session recording tells us how the site performs — it is not used to build a profile of you or to treat one visitor differently from another.

Changes

We update this notice when the site changes in a way that affects it. This version dates from 2026-08-18.