Privacy Policy

1. Who we are

This website (moggel.ch) is operated by Joshua Schmidt, Switzerland. We are the controller responsible for the personal data processed via this website under the Swiss Federal Act on Data Protection (FADP) and, where applicable, the EU General Data Protection Regulation (GDPR).

Contact for data protection matters: privacy@hyper-tech.ch

2. What data we process and why

a) Server log files

Our hosting provider automatically records technical information for every request to this website. This includes your IP address, the date and time of the request, the requested URL, HTTP status code, referrer URL, and your browser's user agent string.

Purpose: ensuring the technical operation, stability and security of the website.
Legal basis: legitimate interest (Art. 31(1) FADP / Art. 6(1)(f) GDPR).
Retention: 10 days, then automatically deleted.

b) User accounts

If you create an account, we store the username and email address you provide, together with a securely hashed password.

Purpose: providing the account and the associated features.
Legal basis: performance of a contract (Art. 31(2)(a) FADP / Art. 6(1)(b) GDPR).
Retention: for as long as your account exists. Deleted on request or after prolonged inactivity.

c) Login attempt logs

To protect accounts from brute-force attacks, we log each login attempt with: IP address, attempted username, user agent, timestamp, whether the attempt was successful, and (on failure) the reason for failure. We never log the attempted password.

Purpose: security, abuse prevention, rate-limiting.
Legal basis: legitimate interest (Art. 31(1) FADP / Art. 6(1)(f) GDPR).
Retention: 90 days, then automatically deleted.

d) Cookies

We use two strictly necessary first-party cookies. No advertising or third-party tracking cookies are set.

• session— keeps you logged in after authentication. Contains an opaque session token. HTTP-only, SameSite=Lax. Expires after up to 365 days or on logout.
• visitor— a random, opaque identifier used solely to deduplicate view counts per comic (so reloading a page does not inflate its view counter). It is not linked to your account, is not shared with any third party, and is not used for advertising or cross-site tracking. HTTP-only, SameSite=Lax. Expires after 365 days.

Purpose: authentication and basic, aggregate view counting on comic pages.
Legal basis: legitimate interest / contract performance (Art. 31(1) and 31(2)(a) FADP / Art. 6(1)(b) and 6(1)(f) GDPR). No consent banner is shown because no non-essential or third-party tracking cookies are set.

3. Who has access to your data

Your data is processed on a server hosted in Germany by our hosting provider, who acts as our processor. We do not sell or share personal data with third parties for marketing purposes. Data may be disclosed to authorities only where we are legally required to do so.

Because our server is in the EU (Germany), data transfers between Switzerland and the EU are covered by adequacy decisions in both directions.

4. Your rights

Under FADP and (where applicable) GDPR you have the right to:

• request information about the data we hold about you;
• request correction of inaccurate data;
• request deletion of your data;
• request restriction of processing;
• receive your data in a portable format;
• object to processing based on legitimate interests;
• lodge a complaint with a supervisory authority — in Switzerland the FDPIC.

To exercise these rights, email privacy@hyper-tech.ch.

5. Data security

All traffic is encrypted via HTTPS. Passwords are stored as salted hashes. Access to server infrastructure is restricted and authenticated.

6. Changes to this policy

We may update this policy to reflect changes in our processing or in the law. The “last updated” date at the top of the page shows when the current version took effect.