Privacy

Privacy Policy

We take the protection of your personal data seriously. This page simply explains what data we collect, why, and how you can exercise your rights.

1. Data Controller

The data controller for data collected on KissKiss Blog is In a Box Sàrl (Audacia Group), a company under Swiss law, reachable at privacy@kisskiss.ch.

2. Data Collected

We only collect data that is strictly necessary for the website's operation and for improving our content:

  • Navigation data: via Google Analytics 4: pages visited, duration, device, browser, country, traffic source. Only if you accept analytical cookies.
  • Email address: only if you voluntarily subscribe to the newsletter (via the Brevo service provider).
  • Local preferences: stored in your browser's local storage (cookie consent, age confirmation, poll votes, article ratings). None of this data leaves your device.

3. Purposes and Legal Basis

  • Anonymous statistics: to improve our content. Basis: consent (which you can withdraw at any time).
  • Newsletter sending: to inform you about our new articles and tests. Basis: explicit consent during registration.
  • Security and abuse prevention: anonymous access logs kept for a maximum of 30 days. Basis: legitimate interest.

4. Cookies and Trackers

We use a minimal number of cookies, classified into two categories:

  • Strictly necessary cookies — no cookies, only local storage to remember your preferences (consent, age confirmation). Cannot be refused as they are essential for the website's operation.
  • Analytical cookies (Google Analytics 4) — _ga, _ga_*. Used only if you click "Accept" in the consent banner. Retention period: 13 months. IP anonymization enabled.

You can modify your preferences at any time by clicking on "Manage my cookies" at the bottom of the page.

5. Data Sharing and Transfers

We never sell, rent or share your personal data for commercial purposes. The only third parties that may process your data are:

  • Google LLC (Google Analytics 4) — hosting and statistical processing in the United States. Transfer governed by the European Commission's Standard Contractual Clauses and the Data Privacy Framework adequacy decision.
  • Brevo SAS (newsletter) — hosting and sending from France (EU). GDPR-compliant processor.
  • Vercel Inc. (website hosting) — page delivery via its global CDN. No personally identifiable data is stored on Vercel's side.

6. Retention Period

  • Analytical data (GA4): 13 months
  • Newsletter email: until you unsubscribe (link present in each email)
  • Local preferences: until you delete them via your browser
  • Server access logs: 30 days maximum

7. Your Rights

In accordance with the new Federal Act on Data Protection (nFADP) in force in Switzerland and, by extension, the European GDPR, you have the following rights at any time:

  • Right of access to your data
  • Right to rectification
  • Right to erasure ("right to be forgotten")
  • Right to restriction of processing
  • Right to data portability
  • Right to object
  • Right to withdraw your consent at any time

To exercise these rights, contact us at privacy@kisskiss.ch. We respond within 30 days maximum.

8. Right to Complaint

If you believe that the processing of your personal data is not compliant with the law, you can file a complaint with the Federal Data Protection and Information Commissioner (FDPIC) in Switzerland.

9. Modification of this Policy

This policy may be updated to reflect legal or technical developments. The date of the last update appears at the bottom of this page.

Last updated: April 15, 2026