Privacy policy

1. Controller

The controller responsible for processing personal data under the Swiss Federal Act on Data Protection (FADP) is: Lunoris Cards, email: lunoriscards@gmail.com.

2. No cookies, no tracking

This website is purely static. It sets no cookies, uses no analytics, tracking or advertising services and loads no third-party content (fonts and images are served directly from this website). There are no customer accounts and no database.

3. Local storage in your browser

So that your request is still there on your next visit, the website stores in your browser's local storage (localStorage): (a) the cards you have added to your request (card identifier and quantity) and (b) your chosen language.

This data stays on your device, is not transmitted to me or any third party and is used solely to put together your request. Your name and email address are not stored locally.

You can delete this data at any time using the button below, by clearing your request or via your browser settings.

4. Hosting and server log files

The website is hosted by Cloudflare (Cloudflare, Inc.) (USA). When you visit, the hosting provider processes technically necessary data (e.g. IP address, date and time, page visited, browser type) in server log files in order to deliver the website securely and reliably. I have no access to these log files and do not analyse them.

Privacy information Cloudflare (Cloudflare, Inc.)

5. Requests and wanted cards

When you send a request or a wanted-card request, I receive: your name, your email address, the cards you want or the card you are looking for, your preferred delivery method, any budget and your message.

The request is sent to me via your own email app. The website itself transmits no data; no additional third-party service is involved. Your email provider and mine process the email in accordance with their own privacy policies.

Purpose: I use this information solely to handle your request, to send you an offer including payment details by email and to arrange delivery. There is no newsletter, no advertising and no disclosure to third parties – except your address to Swiss Post for shipping, if you choose it.

6. Disclosure abroad

The hosting provider may process data in the USA or other countries. Data is only disclosed where the provider is certified under the Swiss-U.S. Data Privacy Framework or appropriate safeguards exist (e.g. standard contractual clauses recognised by the European Commission and accepted by the FDPIC) (Art. 16 FADP).

7. Retention

I delete requests once they have been completed and no statutory retention obligation applies, at the latest 12 months after the last contact.

8. Your rights

You have the right at any time to access your personal data, to have inaccurate data corrected and to have it deleted (Art. 25 et seq. FADP). Just email me at lunoriscards@gmail.com. You may also lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC).

FDPIC – edoeb.admin.ch

9. Security

The website is served exclusively over an encrypted connection (HTTPS) and applies strict security rules (Content Security Policy). All metadata (e.g. GPS location) is removed from card photos before they are published.