Privacy Policy

Last updated: 2026-07-12 · Pending final legal review.

1. Data controller

Hoton Digital, sole proprietorship, Jonathan Hoton, Neuchâtel, Switzerland. Contact: contact@hotondigital.ch.

2. Data collected

  • Email: captured by Stripe at the time of payment, to deliver your STL and provide support.
  • Configuration parameters of your mount (dimensions), associated with your order.
  • Technical data: IP address (anti-abuse rate limiting), server logs.
We do not store any banking data: payment is handled entirely by Stripe.

3. Purposes and legal basis

Performance of the contract (generating and delivering the STL, support, the “it fits” guarantee), and legitimate interest for security (anti-abuse, logs). Legal basis: Swiss Federal Act on Data Protection (nFADP / LPD) and, where applicable to EU residents, Article 6(1)(b) and (f) of the GDPR.

4. Retention period

Order and invoicing data (email, amount, configuration): retained for 10 years in accordance with the Swiss statutory bookkeeping requirement (art. 958f CO). Access to the order (download and regeneration) is kept for the same period; the access link sent by email can be renewed at any time within its 30-day TTL. STLs are regenerated on demand from the stored parameters. Server logs are retained for up to 90 days for security and troubleshooting.

5. Processors / recipients

  • Stripe Payments Europe, Ltd. (payment, email capture) — see their privacy policy.
  • Resend (transactional email delivery: order confirmation and access link) — see their privacy policy.
  • Railway (application hosting, `brickmount.app`) — see their privacy policy.
  • Plausible Analytics (cookieless audience measurement, EU-hosted) — anonymised page views and a small number of conversion events (e.g. checkout started). No personal identifier is set. Legal basis: legitimate interest (measuring usage in aggregate). See Plausible's data policy.

6. Cookies

A single strictly necessary cookie (bm_access, httpOnly) is used to secure access to your downloads after payment. No tracking or advertising cookies; the analytics processor above operates without cookies or device identifiers.

7. Your rights

Under the Swiss nFADP (and the GDPR where it applies): access, rectification, erasure, restriction, portability and objection. To exercise them: contact@hotondigital.ch. You may also lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC, Switzerland) or, for EU residents, with your local supervisory authority.

See also the Terms of Sale, Refund Policy and Legal notice.