Who is responsible
The site is run by the Aero Addicts Team, Switzerland, which is the controller under the Swiss Federal Act on Data Protection (FADP) and, for visitors in the European Union, the EU General Data Protection Regulation (GDPR). Contact: [email protected]. See also the imprint.
Where this policy names a legal basis (“Art. 6 GDPR”), it applies to visitors in the EU. Swiss law requires no legal basis for this kind of processing; we follow the same rules for everyone.
Hosting and server logs
The site is hosted by Netlify, Inc. (USA). When you load a page, Netlify's servers process your IP address, the page requested, the time, your browser's user agent and the referring page, to deliver the page and keep the service secure. This is our legitimate interest in running the site (Art. 6(1)(f) GDPR). Netlify keeps these logs only briefly and acts as our processor under a data processing agreement.
Bike and component data is stored in a database hosted by Neon. The only visitor data in it is what the forms below store.
Bike requests
The request a bike form stores only what you type (brand, model, type, year, link and notes) and the time it was sent, in the same database. It asks for no name or email and we don't store your IP address with it, so please don't enter personal details. We use requests only to decide which bikes to add.
Mistake reports
The “Report a mistake” form stores only what you type (what's wrong, which value and a source link), the page you sent it from and the time, in the same database. Like bike requests, it asks for no name or email and we don't store your IP address with it. We use reports only to check and correct the data.
Bike duel
When you pick one of two bikes in the “bike duel”, we store which two bikes were shown, which one you picked, the question and the time, in the same database. Your browser keeps a random token (see the cookie policy) and we store a one-way hash of it with the vote, only to drop automated voting and count each browser once; it is not linked to an IP address, an email address or anything else about you. We use the votes only to rank bikes by what visitors prefer.
Newsletter (only if you subscribe)
If you subscribe to the newsletter, we store the address, the time, a random link token and when you confirmed, in the same database. We first send a confirmation mail; nothing else is sent until you click its link. The newsletter is about Aero Addicts and what is new on the site, never third-party marketing, and every issue has an unsubscribe link. Unsubscribing deletes the address; an address that is never confirmed is deleted after 30 days. Mails are sent through Resend, Inc. (USA), which processes the address and the mail on our behalf under a data processing agreement. Legal basis: your consent (Art. 6(1)(a) GDPR), which you withdraw by unsubscribing.
Cloudflare Web Analytics
To count visits we use Cloudflare Web Analytics (Cloudflare, Inc., USA). It sets no cookies, stores nothing on your device and does not build a profile of you. It records which pages are viewed, the referring site, your browser type and country, and page performance. Your IP address is used only to process the request and is not stored for analytics. Legal basis: our legitimate interest in knowing how the site is used (Art. 6(1)(f) GDPR).
Google Analytics (only with your consent)
If you accept the cookie banner, we load Google Analytics 4 (Google Ireland Ltd., with processing by Google LLC in the USA). It sets cookies to recognise returning visitors and records the pages you view, how you navigate, your approximate location (derived from your IP address, which GA4 does not store), device and browser. We use it only for aggregated statistics. Legal basis: your consent (Art. 6(1)(a) GDPR). Data is kept for at most 14 months. You can withdraw consent at any time with “Cookie settings” in the footer; see the cookie policy.
Bike photos and external links
Bike and rider photos are loaded directly from the manufacturers', teams' or Wikimedia Commons servers, so your browser connects to those servers and they receive your IP address and browser details, as with any website. We have no control over their processing. Fonts are served from our own domain. Links to other sites only send data to them when you click.
Storage on your device
Your unit and currency setting, your compare list and your cookie choice are saved in your browser's local storage. They never leave your device. Details are in the cookie policy.
Contacting us
If you email us, we use your address and message only to reply, and delete them when the conversation is finished unless we must keep them by law. Legal basis: our legitimate interest in answering you (Art. 6(1)(f) GDPR).
Transfers abroad
Netlify, Cloudflare, Google and Resend process data in the USA. Netlify, Cloudflare and Google are certified under the Swiss–US and EU–US Data Privacy Frameworks, which Switzerland and the EU recognise as providing adequate protection; their data processing terms, and Resend's, include the standard contractual clauses.
Your rights
Under the FADP and, if you are in the EU, the GDPR you have the right to:
- access the personal data we hold about you,
- have it corrected or erased,
- restrict its processing and receive it in a portable format,
- object to processing based on legitimate interest,
- withdraw your consent at any time, without affecting processing before the withdrawal,
- complain to a supervisory authority: in Switzerland the Federal Data Protection and Information Commissioner (FDPIC), in the EU the data protection authority of the country where you live or work.
To exercise them, email [email protected]. We make no automated decisions about you.
Changes
We update this policy when the site changes. The date below shows the latest version.
Last updated: 15 October 2026