07 — Legal
Who we are, which cookies this site sets, and what we do with personal data.
This site sets a small number of cookies so it can run. It does not set cookies for advertising.
Google Analytics 4, loaded through Firebase Analytics and gtag.js, records page views, language changes, and whether a contact form was submitted. It sets first-party cookies such as _ga. Those events do not include your name, email address, or the text of your message.
Google reCAPTCHA Enterprise backs Firebase App Check, which limits our Cloud Functions to this site. reCAPTCHA may set cookies and collect device and interaction signals under Google's privacy policy.
The language shown is taken from the browser on each visit. We do not store it in a cookie.
The controller is Vanguard Signals GmbH, Bellariastrasse 85, 8038 Zürich, Switzerland. Write to info@vanguardsignals.com. This statement covers the Swiss Federal Act on Data Protection. Where the GDPR applies to a visitor, it covers that too.
The contact form collects your name, email address, and message so we can reply. The browser calls our Firebase Cloud Function submitContact. The function writes a document to Google Cloud Firestore. That document feeds our email pipeline, which delivers the inquiry to urs@gubser.ch. We keep the email in our mailbox as a record of the correspondence. A copy stays in Firestore until we delete it. We do not use this data for marketing, and we do not sell it.
Google (Firebase Hosting, Cloud Functions, Cloud Firestore, Analytics, reCAPTCHA) and DeepL process data for us. Processing may take place in the EU and in the United States.
To limit abuse, the contact function stores a short-lived hash of the connecting IP address in Firestore. Public blog posts may be sent to DeepL and cached in Firestore so the site can show German, French, and Japanese. That cache is not your contact data.
Contact emails stay in our mailbox for as long as we need the correspondence as a business record. We then delete or archive them under Swiss commercial record-keeping. The Firestore copy stays until we delete it on request or during ordinary housekeeping. Rate-limit records expire within hours to two days. Analytics data follows Google's retention settings.
You can ask us to access, correct, or delete your personal data, or to restrict processing. Where the GDPR applies, you also have a right to data portability. To exercise these rights, write to info@vanguardsignals.com. You can lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC) or, if you are in the EU or EEA, with your local supervisory authority.
Questions about this statement go to info@vanguardsignals.com.