h402 Association (h402 Verein) Baden, Kanton Aargau, Switzerland Association under Articles 60–79 of the Swiss Civil Code (ZGB)
Version 1.0 — Last updated: 29 March 2026
1. Who We Are and Who Is Responsible for Your Data
This Privacy Policy explains how the h402 Association (in German: h402 Verein), a non-commercial association established under Articles 60–79 of the Swiss Civil Code (ZGB), with its seat in Baden, Kanton Aargau, Switzerland, collects and processes personal data when you visit h402.dev (the "Website").
The h402 Association is the controller of your personal data for purposes of the Swiss Federal Act on Data Protection (revFADP/nDSG). Where the EU General Data Protection Regulation (GDPR) applies to visitors located in the European Economic Area, the h402 Association acts as data controller within the meaning of Article 4(7) GDPR.
Contact: h402 Association Baden, Kanton Aargau, Switzerland Contact: web contact form
2. What Data We Collect and Why
2.1 When You Visit the Website (Server Logs)
When you access h402.dev, our hosting infrastructure automatically records standard server log data. This includes your IP address (which may constitute personal data), browser type and version, operating system, referring URL, pages visited, and date and time of access.
Purpose: Security monitoring, abuse prevention, and diagnosing technical errors. Legal basis: Our legitimate interest in maintaining a secure and functional website (Art. 31 revFADP; Art. 6(1)(f) GDPR). Retention: Log data is retained for a maximum of 30 days and then deleted or anonymised.
2.2 When You Contact Us by Email
If you contact us at contact@h402.dev or any other address we publish, we process the personal data you include in your message — typically your name, email address, and the content of your enquiry.
Purpose: Responding to your enquiry and maintaining a record of correspondence. Legal basis: Processing necessary to take steps at your request (Art. 31 revFADP; Art. 6(1)(b) GDPR) and our legitimate interest in managing communications (Art. 6(1)(f) GDPR). Retention: Correspondence is retained for as long as needed to resolve your enquiry and for up to 3 years thereafter, unless a longer retention period is required by applicable law.
2.3 Analytics
If we use any analytics tool to understand how visitors use the Website, we will describe that tool here, name the data processor, and explain what data is collected. Where analytics are privacy-preserving by design (e.g., cookieless analytics with anonymised IP addresses), no personal data is processed and no consent is required. If any analytics tool sets cookies or processes personal data, we will obtain your consent before doing so.
If no analytics tool is named in this section, none is currently active.
2.4 GitHub and External Links
The Website links to GitHub repositories hosted by GitHub, Inc. (a Microsoft subsidiary). When you click those links, you leave h402.dev and GitHub's own privacy policy applies. We have no access to data GitHub collects about your visit.
Similarly, links to Worldcoin, Coinbase, the Ethereum Attestation Service, and other third-party services are subject to those parties' own privacy policies. We do not share your personal data with these services as a result of a link appearing on our Website.
2.5 What We Do Not Collect
The Website does not operate a marketplace, exchange, or user account system. We do not collect payment information, wallet addresses, or any financial data through this Website. We do not use tracking pixels, cross-site tracking, or behavioural advertising.
3. Cookies
The Website does not currently use cookies for analytics or marketing. If this changes, we will update this Policy and present a cookie banner for your consent before any non-essential cookies are set.
If the Website uses any technical cookies strictly necessary for basic operation (e.g., session cookies), those are set on the basis of our legitimate interest in website functionality and do not require consent.
4. Who We Share Your Data With
We do not sell, rent, or trade your personal data.
We may share personal data with the following categories of third parties, strictly to the extent necessary:
Hosting and infrastructure providers: Our Website is hosted on third-party infrastructure. The hosting provider processes server log data on our behalf as a data processor under a data processing agreement.
Email service providers: If we use a third-party email system to manage correspondence, that provider acts as a data processor.
Legal and regulatory authorities: We will disclose personal data to competent authorities if required to do so by applicable Swiss law or by a legally binding order from a court or regulator. We will notify you of such a request where we are legally permitted to do so.
We require any third-party processor to maintain appropriate technical and organisational security measures and to process data only on our documented instructions.
5. International Data Transfers
The h402 Association is seated in Switzerland. Switzerland is recognised by the European Commission as providing an adequate level of data protection for transfers of personal data from the EEA under the EU-Switzerland adequacy decision.
If any service provider we engage processes data outside Switzerland or the EEA, we ensure that an adequate level of protection is in place — for example, through standard contractual clauses approved by the relevant authority or another recognised transfer mechanism.
6. Data Security
We take appropriate technical and organisational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. These measures are reviewed and updated as necessary.
No method of electronic transmission or storage is 100% secure. If you communicate with us by email, please be aware that email is not a fully secure medium.
7. Your Rights
Under the Swiss revFADP, and where applicable under the EU GDPR, you have the following rights in relation to your personal data:
Right of access: You may request confirmation of whether we process personal data about you, and if so, a copy of that data.
Right to rectification: You may ask us to correct inaccurate or incomplete data.
Right to erasure: You may ask us to delete your personal data where it is no longer needed for the purpose for which it was collected, or where you have withdrawn consent and no other legal basis applies.
Right to restriction: You may ask us to restrict processing of your data in certain circumstances, for example while the accuracy of data is contested.
Right to data portability: Where processing is based on your consent or on a contract, and is carried out by automated means, you may ask to receive your personal data in a structured, commonly used, and machine-readable format.
Right to object: You may object to processing based on our legitimate interests. We will stop processing unless we can demonstrate compelling legitimate grounds that override your interests.
Right to withdraw consent: Where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.
To exercise any of these rights, please contact us through our contact form. We will respond within 30 days. We may ask you to verify your identity before processing your request.
You also have the right to lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC) at www.edoeb.admin.ch, or, if you are located in the EEA, with the supervisory authority in your country of residence.
8. Children
The Website is not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us immediately and we will delete it.
9. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. We encourage you to review this Policy periodically. Continued use of the Website after a change constitutes your acceptance of the updated Policy.
10. Contact and Complaints
For any questions about this Privacy Policy or our data practices, contact us at:
h402 Association Baden, Kanton Aargau, Switzerland
If you are not satisfied with our response, you may contact the Swiss Federal Data Protection and Information Commissioner (FDPIC): Website: www.edoeb.admin.ch
h402 Association — Baden, Aargau, Switzerland — established under ZGB Art. 60–79