Privacy and cookies
Privacy policy under the Swiss Federal Act on Data Protection (FADP) and, for people in the European Union, Regulation (EU) 2016/679 (GDPR) · Last updated: 28 October 2026
This translation is provided for convenience. In case of differences, the Italian version prevails.
1. Controller
Ryan Frioni, Switzerland. Data protection contact: [email protected].
2. In short
- We only collect the data needed to run the service.
- We use no advertising, third-party analytics or profiling.
- We only use technical cookies, needed to sign in: that is why no cookie banner is needed.
- The public pages load nothing from other websites: even the fonts are served by our own server. Only registration and sign-in connect to Clerk, the service that manages the accounts (see section 6).
3. What data we process
| Data | Why | Legal basis (GDPR) | How long |
|---|---|---|---|
| Customer account: first and last name, email, name of the club or association, country, phone (optional), date and version of the Terms and Privacy policy accepted, licence period, settings, date of registration and of the last sign-in. The password is managed by Clerk: the Provider never sees it. | Registering the Customer, activating and managing the licence, allowing sign-in, contacting the Customer. | Performance of the contract (art. 6.1.b GDPR). | As long as the account exists and up to 12 months after the licence ends; accounts never activated up to 12 months after registration. Earlier on request. |
| Content entered by the Customer: judges' names, cat numbers, calls and their outcome (with date and time), text of free announcements, operators' names (with a PIN stored only in encrypted form) and the log of actions with the name of who did them. | Making the calls, showing them on the display and announcing them. | Performance of the contract (art. 6.1.b GDPR). | Active calls until the Customer removes them; call history and action log (including the text of free announcements) 12 months; operators until the Customer deletes them. |
| Technical data: IP address of whoever tries to sign in or register, or opens a demo. | Blocking repeated attempts to guess passwords and the opening of too many demos. | Legitimate interest in the security of the service (art. 6.1.f GDPR). | At most 1 hour, in memory only. |
| Payment data of the Customer (name, amount, date of payment). | Managing licence payments and the related legal obligations. | Performance of the contract and legal obligations (art. 6.1.b and 6.1.c GDPR). | For the period required by law (in Switzerland usually 10 years for accounting records, art. 958f of the Swiss Code of Obligations). |
The Swiss FADP does not require a legal basis for each processing activity: we state them for people in the European Union, where the GDPR also applies.
Anyone who only visits the public pages of the site (including this one) gives us no personal data, apart from the technical data every server receives to show a page (for example the IP address), which may appear in the server logs.
4. The demo
"Try the demo" creates a temporary account without asking for any personal data. Everything it contains (calls, settings, log) is deleted automatically after 24 hours.
5. Judges' names and other data entered by the Customer
For third-party data the Customer enters in the service (for example the names of judges or operators) the controller is the Customer, who must inform the people concerned. The Provider processes this data on the Customer's behalf, as processor (art. 9 FADP and art. 28 GDPR), only to run the service. The related agreement is available on request.
6. Who we share data with
- No external hosting provider for MeowBoard: the server and database of the service are hosted at a private location of the controller, in Switzerland.
- Clerk (Clerk, Inc., United States), for registration, sign-in, email confirmation and password recovery: it receives the details of the registration form, the password (which it stores only in encrypted form), the IP address and technical browser data, and sends the emails with the codes. The transfer is based on the Swiss-U.S. Data Privacy Framework and the EU-U.S. Data Privacy Framework, in which Clerk participates. To block automated sign-ups Clerk may use Cloudflare's anti-robot check (Turnstile).
- Google (Google LLC), for speech synthesis: our server sends Google the text of the announcements (cat numbers, names of judges or rings, text of free announcements) and receives the audio. No emails, passwords or visitors' IP addresses are sent. Google may process these texts in the United States; the transfer is based on the Swiss-U.S. Data Privacy Framework and the EU-U.S. Data Privacy Framework.
- If Google's service does not respond, the display uses the browser's built-in voice: depending on the browser, this too may be generated by the browser maker's servers.
Data is not sold or used for advertising.
7. Cookies and browser storage
| Name | Type | Purpose | Duration |
|---|---|---|---|
mb_session, mb_session.sig |
Technical cookie | Keeps you logged in to the panel. It is only created when you log in or open a demo. | 30 days, or until you log out |
mb_mode, mb_device_audio, mb_panel_theme, mb_panel_lang, mb_display_theme, mb_display_lang, mb_site_theme, mb_judge_device, mb_judge_lang |
Browser local storage | Remember some preferences on this device (judge or ring, sound, language, theme). They are not sent to the server. | Until you clear them from the browser |
__session, __client_uat, __client |
Clerk technical cookies | Keep you signed in during registration and sign-in and protect the account. During registration Cloudflare's anti-robot check may add its own security cookie. | For the length of the sign-in session, as set by Clerk |
They are strictly necessary for the service. Under Swiss law (art. 45c of the Telecommunications Act) it is enough to inform users, as we do here; under European rules they do not require consent either. We use no profiling or advertising cookies.
8. Your rights
You can ask at any time for information about your data, have it corrected or deleted, receive it in a readable format and object to the processing (art. 25 et seq. FADP; for people in the EU also arts. 15-22 GDPR). Write to [email protected]: we answer within 30 days.
If you believe the processing is not correct you can contact the Federal Data Protection and Information Commissioner (FDPIC, www.edoeb.admin.ch). If you are in the European Union you can also lodge a complaint with the supervisory authority of your country.
9. Security
Passwords are managed by Clerk and stored only in encrypted form; operator PINs are stored on our server, also only in encrypted form. Each Customer sees only their own data. The website must be used over a secure connection (HTTPS). Repeated failed sign-in attempts are blocked.
10. Changes
This policy may be changed at any time, without notice. The version in force is always the one published on this page, with the date of the last update shown at the top. We do not send notifications about changes: please check this page regularly.