privacy policy

Last updated: July 18, 2026

PhémeApp is an automated alert service for public planning consultations in the cantons of Vaud, Geneva, Valais, Neuchâtel, and Jura (Switzerland). This policy describes how we collect, use, and protect your personal data, in accordance with the Federal Act on Data Protection (nLPD) in force since September 1, 2023.

1. Who is responsible for processing?

PhémeApp
Operated by Arnaud Mathier, independent
Switzerland
Contact: [email protected]

2. What data do we collect?

Data	Purpose	Legal basis
Email address	Sending alerts and communications related to the service	Consent (registration on the form)
First name and last name	Personalization of emails	Consent
Postal address(es)	Determine the monitoring radius and detect nearby public planning consultations	Consent
GPS coordinates (derived from the address)	Calculate distances from CAMAC publications	Consent — geocoding via api.swisstopo.ch
Phone number (optional)	Contact in case of account-related issues	Consent
Profile (owner / tenant)	Tailor the content of alerts to your situation	Consent
History of alerts sent	Display in the user space, avoid duplicates	Legitimate interest (proper functioning of the service)
Anonymized visit statistics (page viewed, browser, country of origin)	Understand site traffic and improve it	Legitimate interest — no personally identifiable data, no cookies, no IP address retained

We do not collect : payment data, sensitive data (health, political opinions, etc.), tracking cookies. We only measure anonymized traffic statistics (see section 2 below).

3. How do we use your data?

Monitor official publications of public planning consultations via the CAMAC API (canton of Vaud), the SITG register (canton of Geneva), the digital official bulletin eBO (canton of Valais, via amtsblattportal.ch), the SITN geoportal / SATAC system (canton of Neuchâtel), and the Official Journal of the Republic and Canton of Jura, section 'Construction Notices' (canton of Jura)
Send you an email alert when a publication is detected in your radius
Send you reminders if an objection period is approaching its end
Provide you with a monthly report of your monitoring
Allow you to manage your account via your personal space (magic link)

We never sell your data. We do not use them for any third-party advertising or commercial purposes.

4. Who do we share your data with?

Subcontractor	Role	Country
Brevo (formerly Sendinblue)	Email routing (SMTP)	France / EU
Google (Google Sheets, Apps Script)	User database and history	EU (data stored in Europe)
GitHub (Microsoft)	Code hosting and automated execution (GitHub Actions)	United States — under SCCs guarantees
api.swisstopo.ch	Geocoding of postal addresses	Switzerland
SITG (Department of Territory, Geneva)	Source of official publications of Geneva public planning consultations	Switzerland
amtsblattportal.ch (inter-cantonal platform for Swiss official bulletins)	Source of official publications of Valais public planning consultations (digital official bulletin eBO)	Switzerland
SITN (Neuchâtel Territory Information System, SATAC system)	Source of official publications of Neuchâtel public planning consultations	Switzerland
Official journal of the Republic and Canton of Jura (rsju.jura.ch)	Source of official publications of Jura public planning consultations (section 'Construction Notices', Thursday edition)	Switzerland
Nominatim / OpenStreetMap	Identification of the municipality from GPS coordinates	Germany (OSM Foundation)
GoatCounter	Anonymized traffic statistics, no cookies	European Union

5. Retention period

Your personal data is retained as long as your account is active.In case of inactivity of more than 2 years (no alerts sent, no login), your account is automatically deleted.

You can request the immediate deletion of your data at any time (see section 7).

6. Security

We implement the following measures to protect your data:

Encrypted transmission (HTTPS / TLS) for all network exchanges
Authentication via magic link for temporary use (HMAC-SHA256, valid for 30 days)
No access secrets stored in plain text in the source code
Write access to data restricted to the Apps Script authenticated by token
Operational logs containing no personally identifiable data

7. Your rights (nLPD)

In accordance with the Federal Data Protection Act, you have the following rights:

Right	Description	How to exercise it
Access	Obtain a copy of all your data	Email to [email protected]
Rectification	Correct inaccurate data	Via your personal space or by email
Deletion	Delete all your data	Button "Delete my account" in the personal space or email
Objection	Object to certain processing	Email to [email protected]
Portability	Receive your data in a structured format	Email to [email protected]

We respond to any request within 30 days.

8. Cookies and traffic statistics

PhémeApp does not use cookies. The user space operates via a temporary magic link without persistent session or tracking cookie.

We use GoatCounter, a privacy-friendly traffic analysis tool: it does not place any cookies, does not track individuals across sites, and does not log your full IP address. The produced statistics (page views, browser, approximate country of origin) are fully anonymized and do not allow for identification.

9. Changes to this policy

In the event of substantial changes, you will be informed by email before the changes take effect. The update date is indicated at the top of this page.

10. Complaints

If you believe that the processing of your data violates the nLPD, you have the right to file a complaint with the Federal Data Protection and Transparency Officer (PFPDT) :
www.edoeb.admin.ch

📩 Contact us

For any questions regarding your personal data:
[email protected]
Response within 30 working days.