Privacy policy

The data controller for this website is Marian Toader, Lausanne, Switzerland.

Nidoro is not yet a company, so the controller is a named private individual rather than an organisation. Our full postal address is supplied on request — write to marian@nidoro.ch and we will send it to you.

You can reach us at any time at marian@nidoro.ch. We answer questions about your data ourselves; there is no support desk between you and us.

We have not appointed a data protection officer, because the scale of what we do here does not require one under Swiss or EU law. That does not reduce your rights in any way.

This policy covers the website nidoro.ch and the two forms on it: the parent waitlist and the institution contact form.

Nidoro the platform does not exist yet. When it opens, it will have its own privacy policy, which will be more detailed than this one because the platform will handle more data. Joining the waitlist does not sign you up to that future policy — you will be asked to read and accept it separately when you create an account.

If you join the parent waitlist, we collect your first name, your email address, your postcode, your commune, the languages you speak and — only if you choose to give them — your children's age ranges. If you tick the optional box, we also record that you are willing to try an early version. We also record the date and time you gave consent and the version of the consent wording you agreed to, because we are required to be able to show that your consent was given freely and informedly.

We use the postcode and commune to decide which neighbourhoods to open first, since Nidoro only works if parents live near one another. We use the languages and age ranges for the same planning purpose. We use your first name and email address to write to you about the launch in your area, and for nothing else. If you ticked the early-version preference, that contact may include an invitation before opening.

If you contact us through the institution form, we collect the institution's name and type, its commune, your name as the contact person, your email address, the approximate number of families if you give it, and whatever you write in the free-text field. If you tick the optional box, we also record that you are interested in being among the first institutions on Nidoro. We use these to reply to you and to understand what institutions need from the platform.

When anyone visits the site, our hosting provider records technical information automatically: the IP address of the request, the time, the page requested, the browser and operating system. This happens on any website and is necessary to serve the page and to detect abuse. These logs are kept for a short period and are not linked to your waitlist entry.

We do not collect any of the following on this website:

• Any name, photograph, date of birth or other identifying detail of a child. Age ranges are the only child-related information on the site, and an age range does not identify anyone.
• Your street address, your telephone number or your date of birth.
• Your gender, your family situation or your marital status.
• Payment details of any kind. Nothing on this site costs money.
• Any information about you from any other source. Everything we hold you typed into a form yourself.

We process your waitlist data because you consented to it by ticking the box on the form. That box is never pre-ticked, it covers one purpose only, and nothing else is bundled into it.

You can withdraw that consent whenever you like, either by clicking the unsubscribe link in any email we send or by writing to marian@nidoro.ch. Withdrawing consent stops all future processing. It does not make what we did before unlawful.

We process institution enquiries on the same basis, and the technical logs described above on the basis of our legitimate interest in keeping the site running and secure.

Under Swiss law this processing is governed by the Federal Act on Data Protection (nLPD). If you are in the European Economic Area, the GDPR also applies, and our basis there is Article 6(1)(a) for the forms and Article 6(1)(f) for the technical logs.

After you submit the form we send you an email with a confirmation link. Your signup only counts once you click it. This is called double opt-in, and it exists so that nobody can put your address on our list without your knowledge.

If you never click the link, we delete the unconfirmed entry after 30 days.

The database holding your waitlist entry is hosted in Zurich, Switzerland, by Supabase, and it does not leave Switzerland.

Two other companies necessarily touch your data in the course of running the site, and both are outside Switzerland. Our website hosting is provided by Vercel, which is based in the United States and serves the pages from servers in Europe. Our confirmation and update emails are sent by Resend, which is based in the United States; your first name and email address pass through their systems in order for the email to be delivered.

We have data processing agreements with all three. Where data reaches the United States, it does so under standard contractual clauses, together with the Swiss addendum required by the Federal Data Protection and Information Commissioner. These are the mechanisms Swiss and EU law provide for transfers to countries whose data protection law is not considered equivalent.

We tell you this plainly rather than hiding behind the fact that the database itself is Swiss. Storage is Swiss; delivery is not, and there is no way to send an email without a delivery provider.

We keep your waitlist entry until Nidoro opens in your area and you either create an account or tell us you are no longer interested — or for 24 months from the day you confirmed your email address, whichever comes first. If 24 months pass and we have not opened where you live, we delete your entry rather than keep it indefinitely against a launch that may never happen.

Unconfirmed signups are deleted after 30 days.

Institution enquiries are kept for 24 months from your last contact with us.

Technical server logs are kept for up to 30 days.

If you unsubscribe or ask for deletion, we delete your entry promptly. We keep a record of the fact that your address unsubscribed, and nothing else, so that we do not accidentally add you back.

This site sets no advertising cookies, no tracking cookies and no third-party cookies. That is why you were not shown a cookie banner — we do not need your permission for anything, because there is nothing to permit.

We store nothing in your browser.

We use Vercel Web Analytics to count how many people visit the site and which pages they read. It sets no cookies, does not follow you across other websites and does not build a profile of you. It records the page, the country, the type of device and the site that sent you, and nothing that could identify you personally.

Vercel is the same company that hosts this website, described in the section above. No additional company sees your visit.

Swiss and EU data protection law give you the following rights over your data, and you can use any of them by writing to marian@nidoro.ch. You do not have to explain why, and it costs nothing.

• See it. Ask us for a copy of everything we hold about you.
• Correct it. Tell us if anything is wrong and we will fix it.
• Delete it. Ask us to erase your entry entirely. We will, and we will confirm when it is done.
• Take it with you. Ask for your data in a machine-readable file you can give to someone else.
• Restrict or object. Ask us to stop using your data in a particular way while a question about it is resolved.
• Withdraw consent. Unsubscribe from any email, or write to us. This ends everything.

We will respond within 30 days. If your request is unusually complex we will tell you so within those 30 days and explain how much longer we need.

We may ask you to confirm that the request comes from the email address on the entry, which is the only way we can tell it is really you. We will not ask you for a copy of your identity document, because we do not hold one and asking for one would collect more data than the request needs.

Write to us first at marian@nidoro.ch. We would far rather fix something ourselves than have you take it further.

If that does not resolve it, you can complain to the Federal Data Protection and Information Commissioner (FDPIC) in Bern, the Swiss supervisory authority. If you live in the European Economic Area, you may instead complain to the supervisory authority of the country you live in.

The site is served over an encrypted connection, and your data is encrypted both while it travels and while it is stored. Access to the database is restricted at the database level, not merely hidden in the interface, and is limited to the people building Nidoro.

No system is perfectly secure, and we will not claim otherwise. If a breach ever occurred that put your rights at serious risk, we would notify the FDPIC as Swiss law requires, and we would email you directly rather than wait for you to read about it.

This website is for parents and for the people who run childcare institutions. It is not intended for children and children should not sign up to it.

We hold no information that identifies a child. Age ranges are optional, are not tied to a name or a birth date, and cannot be used to identify anybody. This is a deliberate design decision that will carry through to the platform itself when it launches, not a temporary state of affairs.

Some promises are easier to understand as a list of things that will not happen.

• We never sell your data, and we never rent, trade or share it with anyone for their own purposes.
• We never show your postcode, your commune or your email address publicly.
• We never send you marketing on behalf of somebody else.
• We never make automated decisions about you, and we never build a profile of you.
• We never track you across other websites.
• We never email you more often than we have something real to tell you about your area.

If we change this policy we will update the date at the top of the page. If a change materially affects how we use data you have already given us, we will email you before it takes effect and you will be able to withdraw beforehand.

We will not quietly broaden what we do with your data and rely on you not noticing.

Any question about your data, however small, goes to marian@nidoro.ch. A real person reads it.

Marian Toader, Lausanne, Switzerland. Full postal address on request.