- Home
- Privacy
Privacy policy
This privacy policy explains which personal data we process when you visit this website, send us an inquiry or apply to work with us, why we do so, and which rights you have. It is based on the Swiss Federal Act on Data Protection (FADP) and, where it applies, on the EU General Data Protection Regulation (GDPR).
Controller
The controller responsible for processing your personal data is:
Stacktrace
Lugano, Switzerland
Email: info@stacktrace.cc
Our full postal address is given in the imprint. For any question about data protection, or to exercise your rights, please write to the email address above.
Contact form
When you send us an inquiry through the contact form, we process:
- your name and work email address
- your company and location
- the area of interest you select and your project description
- your preferred engagement model and desired start
- an indicative budget, if you choose to provide one
We use this data to answer your inquiry, to clarify your needs and, where appropriate, to prepare a proposal. The form is sent to us by email, and you receive a confirmation email at the address you entered. Please do not include confidential information or personal data of third parties in the form; where needed, we sign a confidentiality agreement before discussing details.
Application form
When you apply through our careers pages, we process:
- your name, email address and location
- the URLs of your LinkedIn and GitHub profiles, if you provide them
- your years of experience, main specialization and preferred working arrangement
- your message
- your CV in PDF format, if you choose to upload one
We use this data to evaluate your application and to contact you about suitable opportunities to work with us. Your application, including an uploaded CV, is sent to us as an email; the CV is attached to that email and is not stored on the website. You receive a confirmation email at the address you entered.
Technical data and spam protection
Server and security logs. When you visit the website, our hosting provider Cloudflare automatically processes technical data needed to deliver the pages and protect the website against attacks and abuse, such as your IP address, the date and time of the request, the page requested, your browser type and operating system, and the referring page. We do not use this data to identify visitors or to build profiles.
Cloudflare Turnstile. To protect our forms against spam and automated abuse, we use Cloudflare Turnstile. When you submit a form, Turnstile checks whether the request comes from a person by evaluating technical signals from your browser and device, including your IP address. Cloudflare's Turnstile Privacy Addendum applies to this check.
Cookies and local storage
We do not use cookies for tracking or advertising, and we do not use third-party tracking or advertising tools.
If you choose a colour theme or a language on this website, your choice is saved in your browser's local storage (under the keys theme and lang) so that it is applied on your next visit. This information stays on your device and is not sent to us. You can delete it at any time in your browser settings.
Where we use Cloudflare Web Analytics to obtain aggregated statistics on page views, the service works without cookies and does not collect personal identifiers.
Legal bases
Under Swiss law, we process personal data in accordance with the principles of the FADP. Where the GDPR applies, we rely on the following legal bases:
- Inquiries and proposals: steps taken at your request prior to entering into a contract (Art. 6(1)(b) GDPR) and, where you contact us on behalf of a company, our legitimate interest in answering business inquiries (Art. 6(1)(f) GDPR).
- Applications: steps prior to a possible contract with you (Art. 6(1)(b) GDPR) and your consent, given in the application form, to keep your application for future opportunities for up to 12 months (Art. 6(1)(a) GDPR).
- Security logs, spam protection and cookieless statistics: our legitimate interest in operating a secure, reliable website and in understanding its use in aggregate (Art. 6(1)(f) GDPR).
- Business records: our legitimate interest in complying with the record-keeping obligations of Swiss law (Art. 6(1)(f) GDPR).
Providing your data is voluntary. Without the fields marked as required, however, we cannot process your inquiry or application. We do not use automated individual decision-making or profiling.
Service providers and international transfers
We use the following service providers, who process personal data on our behalf and under our instructions:
- Cloudflare, Inc. (USA): hosting of the website and its server functions, content delivery network, security services, Turnstile spam protection and, where enabled, cookieless web analytics. Cloudflare operates a global network, so data may be processed in data centres in different countries. See Cloudflare's privacy policy.
- Resend (Plus Five Five, Inc., USA): delivery of the emails generated by our forms, both the notification to us and the confirmation to you. See Resend's privacy policy.
As a result, personal data may be transferred to the USA and to other countries whose legislation may not guarantee a level of data protection equivalent to Swiss or EU law. We transfer data only with appropriate safeguards: where a provider is certified under the Swiss-US or EU-US Data Privacy Framework, on the basis of the corresponding adequacy decision; otherwise on the basis of the European Commission's standard contractual clauses, with the adaptations required by Swiss law.
We do not sell your personal data or share it with third parties for their own marketing purposes.
Retention
- Inquiries: we keep your inquiry and our correspondence for as long as needed to handle your request and, where a business relationship results, for as long as statutory retention obligations for business records require.
- Applications: we keep your application, including your CV, for a maximum of 12 months and then delete it, unless you agree to a longer period.
- Technical logs: kept only for a short period, as needed for security and troubleshooting.
Your rights
Within the limits of the applicable law, you have the right to:
- obtain access to the personal data we hold about you
- have inaccurate data corrected
- have your data erased
- object to processing based on our legitimate interests
- receive the data you provided to us in a common electronic format (data portability)
- withdraw your consent at any time, without affecting the lawfulness of processing carried out before the withdrawal
Where the GDPR applies, you can also request the restriction of processing. To exercise your rights, write to info@stacktrace.cc. We may ask you to prove your identity.
You have the right to lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC) or, if you live or work in the EU, with the data protection supervisory authority of your country.
Changes to this policy
We may update this privacy policy when our website or the law changes. The current version is always published on this page.
Last updated: 13 October 2026