Privacy policy

This policy describes which personal data Bärtschi Software processes when operating tightrelay. It follows the Swiss Federal Act on Data Protection (FADP) and, where applicable, the EU General Data Protection Regulation (GDPR).

Controller

Bärtschi Software
Matthias Bärtschi
Lochmattweg 45
5033 Buchs
Switzerland

Email: matt@matt-b.ch

This website

The tightrelay.com website is hosted by Vercel Inc., San Francisco, USA. When you visit it, Vercel processes technical data such as your IP address, the time, the requested address and your browser to deliver the page and protect it from abuse. Vercel is certified under the EU-US and Swiss-US Data Privacy Framework.

The website sets no cookies, uses no analytics or advertising services and loads no third-party content. Fonts are served from the same server as the page.

Sync service (api.tightrelay.com)

tightrelay syncs the data of apps that developers run on tightrelay. The provider of each app is responsible for the content that app syncs. Bärtschi Software processes this data on the provider’s behalf and only to deliver the service. For Stundennachweis, Bärtschi Software is itself the provider.

The following data is processed:

• Devices: a random device ID, the device’s public key, the device name, the platform and the time of the last connection. Accounts are anonymous: tightrelay knows neither the names nor the email addresses of end users.
• Synced content: the documents the app transmits, stored with versions. Deleted documents remain as a deletion marker without content so that every device learns about the deletion.
• Shared spaces: the display name a member chooses in a shared space, and their role.
• Subscriptions: identifiers and terms of purchases in the App Store or on Google Play. tightrelay sends these to Apple or Google for verification and receives notifications about renewals, expiry and refunds.
• Technical data: IP addresses are only held briefly in memory for rate limiting. Server logs contain the time, path, status code and device ID.

The data is stored on servers of Hetzner Online GmbH, Gunzenhausen, Germany, in data centres in the EU. Daily backups are encrypted with OpenPGP before upload and kept off-site. The storage provider cannot read them.

Developer console (app.tightrelay.com)

Developers sign in through a self-hosted sign-in service (auth.tightblocks.com), which stores their email address, name and password hash. The console sets a strictly necessary session cookie that expires after 12 hours of inactivity and after 7 days at the latest. Changes made in the console are logged with time and person.

Retention

Synced data is kept as long as the account exists. On request, we delete an account with all its data. Backups are deleted once a fixed retention period has passed.

Your rights

You can request access to your data, have it corrected or deleted, object to its processing and ask for a copy of it. Write to matt@matt-b.ch. If your request concerns the data of a specific app, please contact its provider first. You also have the right to complain to the Swiss Federal Data Protection and Information Commissioner (FDPIC) or to a supervisory authority in the EU.

Last updated: 23 September 2026