Privacy policy
Last updated: 15 November 2026. This policy covers the websites nice-grips.ch and nice-grips.com and the Nice Grips app (iOS, Android, app.nice-grips.ch and app.nice-grips.com). It follows the Swiss Federal Act on Data Protection (FADP) and, where applicable, the EU General Data Protection Regulation (GDPR).
1. Controller
The operator of Nice Grips, a private, non-commercial project based in Switzerland (seeimprint). Privacy contact: info@nice-grips.ch
2. Website without an account
The website sets no cookies and uses no tracking and no advertising. Fonts and animations come from our own server.
Hosting: the website and app run on Cloudflare, Inc. (USA), with data centres worldwide. When you visit, Cloudflare processes technically necessary data: IP address, time, requested address, browser and operating system. The purpose is fast, secure delivery and protection against attacks. Cloudflare is certified under the Swiss-U.S. and EU-U.S. Data Privacy Framework; standard contractual clauses also apply.
3. Videos from YouTube (two-click solution)
The skill videos are hosted on YouTube, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (parent company Google LLC, USA). We embed YouTube in privacy-enhanced mode (youtube-nocookie.com).
Opening a skill page loads nothing from YouTube or Google, not even a thumbnail. Only when you click «Load video» does your browser connect to YouTube. Google then receives at least your IP address, device and browser data and which video you play on which page. Google may set cookies or similar storage and transfer the data to the USA. If you are signed in to Google, Google can link the view to your account.
The legal basis is your consent given by the click (Art. 6(1)(a) GDPR). Without a click, nothing is transferred. More from Google: policies.google.com/privacy.
The same applies in the app: videos open in the YouTube player only after you tap «Load video».
4. App and account
You can use skills, videos and animations in the app without an account. You only need one for tracking.
Which data
- Email address (sign-in)
- Display name, role (base, flyer or both), year of birth, language
- for people under 16: the time parental consent was confirmed
- Pairs (who trains with whom) and progress per skill, with time and person of the last change
- technical sign-in logs (time, IP address) for security
Purpose and legal basis
We process this data to provide your account and tracking (contract, Art. 6(1)(b) GDPR) and to protect the service against abuse (legitimate interest, Art. 6(1)(f) GDPR). We do not sell data or use it for advertising.
Who sees the data
Only the members of your pair see your progress. Access rules inside the database enforce this.
Service providers
- Supabase, Inc. (USA): database and sign-in. Data is stored in a data centre in Zurich (Switzerland). Standard contractual clauses.
- Resend (Plus Five Five, Inc., USA): sending sign-in codes by email. Standard contractual clauses.
- Google (Google Ireland Limited) and Apple (Apple Distribution International Ltd., Ireland): only if you choose «Sign in with Google» or «Sign in with Apple». We then receive your email address and, if shared, your name. With Apple you can hide your email address.
- Cloudflare, Inc.: hosting of the web app, see section 2.
App distribution is also subject to the privacy terms of Apple (App Store) and Google (Google Play).
5. Children and teenagers
For tracking we ask for the year of birth. If someone is under 16, the app only saves progress once parental consent has been confirmed. [Have the parental confirmation flow legally reviewed before launch.]
6. Retention
- Account, profile, pairs and progress: until you delete your account.
- Pairs without members are deleted automatically along with their progress.
- Failed invite attempts: 1 day. Expired invite codes are removed.
- Server and sign-in logs: at most 7 days.
7. Your rights
You have the right to access, rectification, erasure, data portability, restriction of processing and objection. You can withdraw consent at any time. Delete your account right in the app under Account → «Delete account»; this permanently removes your account, profile and memberships. For anything else, write to info@nice-grips.ch.
You can lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC) or, in the EU, with the supervisory authority where you live.
8. Shop
The shop at shop.nice-grips.com runs separately on Shopify and has its own privacy policy. [Add once the shop is live.]
9. Changes
We update this policy when the service changes. The version published here applies.
Translation of the German original. In case of discrepancies, the German version prevails.