Data protection

Privacy policy

How Consentio collects, uses and protects your personal data.

Last updated: February 1, 2026

1. Data controller

Anorac Studio Sàrl Fribourg, Switzerland Email: privacy@consentio.ch Anorac Studio Sàrl is responsible for the processing of personal data collected through the Consentio platform (consentio.ch and account.consentio.ch).

2. Data collected

We collect the following categories of data: — Account data: name, email address, password (hashed), organization name — Usage data: pages visited, actions taken in the dashboard, IP address (anonymized) — Billing data: processed by Stripe, we do not store your credit card information — Consent data: your visitors' consents are stored as an anonymous hash (SHA-256 of IP + domainId), with no personal identification possible

3. Purposes of processing

Your data is processed for the following purposes: — Providing and managing your Consentio account — Billing and subscription management — Improving our services and user experience — Account-related communications (transactional emails) — Compliance with our legal obligations

4. Legal basis

The processing of your data is based on: — Contract performance (Art. 31 para. 2 let. a nFADP): necessary for service provision — Consent (Art. 31 para. 1 nFADP): for non-essential cookies and marketing communications — Legitimate interest (Art. 31 para. 1 nFADP): service improvement, security — Legal obligations: retention of billing data

5. Data retention

— Account data: retained for the duration of your subscription, then deleted within 30 days of account closure — Billing data: retained for 10 years in accordance with Swiss law (CO Art. 958f) — Consent data: retained for 3 years (nFADP/GDPR compliance proof) — Server logs: deleted after 90 days

6. Your rights

In accordance with the nFADP and GDPR, you have the following rights: — Right of access: obtain a copy of your personal data — Right to rectification: correct inaccurate data — Right to erasure: request deletion of your data — Right to data portability: receive your data in a structured format — Right to object: oppose the processing of your data — Right to withdraw consent: at any time, without retroactive effect To exercise your rights: privacy@consentio.ch

7. Sub-processors and third-party services

— Infomaniak (Switzerland): server and database hosting — Stripe (USA, standard contractual clauses): payment processing — Resend (USA, standard contractual clauses): transactional email delivery — Sentry (USA, standard contractual clauses): error monitoring — KeyCDN (Switzerland): JavaScript widget distribution

8. Data security

We implement appropriate technical and organizational measures: — SSL/TLS encryption for all communications — Password hashing (bcrypt) — IP address anonymization for visitors (SHA-256) — Hosting in Switzerland (Infomaniak, ISO 27001) — Strict access control and logging

9. Cookies

Consentio only uses cookies essential to platform operation: — Session cookie: account authentication — Preferences cookie: language and theme No tracking, analytics or marketing cookies are placed on consentio.ch without your explicit consent.

10. Changes to this policy

We reserve the right to modify this privacy policy at any time. In case of a substantial change, we will notify you by email or through a notification in your dashboard. The date of last update is indicated at the top of this page.

11. Contact

For any questions regarding the protection of your data: Anorac Studio Sàrl Email: privacy@consentio.ch Address: Fribourg, Switzerland You may also file a complaint with the Federal Data Protection and Information Commissioner (FDPIC).