AlpiStats
Sign inFree trial

Privacy policy

Version of 17 October 2026

This translation is provided for information. The French version is legally binding.

This policy concerns the data that Ekylibr SA processes as controller: that of AlpiStats customers (accounts) and of the visitors to the alpistats.ch website. For the visit data of our customers’ sites, we act as processor: see the data processing agreement.

1. Controller

Ekylibr SA (Ekytec), Avenue du Mail 18, CP 389, 2002 Neuchâtel, Switzerland. Contact: contact@alpistats.ch.

2. Customer data

  • account: email address, password (hashed, never readable), confirmation date, organisations and roles;
  • session: one strictly necessary cookie ("alpistats_session"), valid for 30 days, to keep you signed in;
  • site settings, report preferences, history of sensitive actions (sign-in, invitations, deletions);
  • service emails (confirmation, sign-in, trial-end reminders, subscription, requested reports), sent from Switzerland;
  • display preferences (light or dark theme, last organisation opened), remembered in your browser only;
  • subscription and billing: managed by Stripe; we receive the subscription status, never the card data.

Purposes: providing the service, security, billing and support. Legal bases (for people in the European Union, art. 6 GDPR): performance of the contract, our legal obligations (10-year accounting retention for invoices) and our legitimate interest in protecting the service against abuse. No automated individual decision-making takes place.

3. Bot protection

The sign-up and contact forms use ALTCHA: a calculation performed by your browser, without cookies or third-party services.

Contact form: your name (optional), your email address and your message are sent to us by email so that we can reply, then kept for the duration of the exchange and for 2 years at most.

4. Audience measurement of alpistats.ch

We measure the visits to the alpistats.ch website with AlpiStats itself, without cookies and only after your consent, requested through the banner at the bottom of the page (basis: your consent), with the same rules as for our customers. If you refuse, no audience measurement takes place. Your choice is remembered in your browser and valid for 6 months; you can change it or withdraw your consent at any time with the badge at the bottom of the page. The banner specifies what is measured. The application (app.alpistats.ch) is not measured.

5. Retention

  • account: until it is deleted; sites and data of accounts without a subscription are deleted 90 days after the end of the trial or of the paid period;
  • sessions: 30 days at most; technical logs: a few days (automatic rotation); backups: 30 days at most;
  • audience measurement of alpistats.ch: visitor’s choice 6 months; detailed data 6 months; anonymous totals 25 months; proof of consent 12 months at most;
  • Search Console data, if the customer connects a property: queries and pages 6 months, totals by day, country and device 25 months, deleted when the property is disconnected or the site is deleted;
  • contact form messages: for the duration of the exchange, 2 years at most;
  • billing data: 10 years.

6. Recipients

Our processors, published on the "Sub-processors" page: Infomaniak (Switzerland) for hosting, backups and emails; Stripe for payment. We do not sell any data.

Google (Search Console): if a customer connects their property, AlpiStats imports, through a service account that the customer authorises in their own Google account, the statistics that Google makes available for that property. This reading involves technical exchanges with Google’s APIs (authentication, requested property and period); AlpiStats sends Google neither the events it measures nor any visitor data of its customers.

Transfer abroad: only customers’ billing data is transmitted to Stripe Payments Europe Ltd (Ireland), a State whose protection is recognised as adequate by Switzerland; the Stripe group may process it in the United States with the safeguards provided for (Swiss-U.S. Data Privacy Framework and standard contractual clauses). Visit data does not leave Switzerland.

7. Your rights

You may request access to your data, its rectification, its deletion or its delivery in a common format, and object to processing: from "My account" (export and deletion) or by writing to contact@alpistats.ch. You may withdraw your consent to the audience measurement of alpistats.ch at any time with the badge at the bottom of the page. You may contact the Federal Data Protection and Information Commissioner (FDPIC) or, in the European Union, the authority of your country.