Privacy policy

Last updated: October 18, 2026

This policy explains which personal data we process when you visit this website or book a review, why, and what rights you have. We process as little as we can.

Controller
Michel Wehrli (Katalyze)
Gysulaweg 7
5034 Suhr
Switzerland
hello@slopmedic.com

We follow the Swiss Federal Act on Data Protection (FADP) and, where it applies to you, the EU General Data Protection Regulation (GDPR).

When you visit the website

Server logs

Our hosting provider automatically logs technical data for each request: IP address, date and time, the page requested, browser type and version, operating system and the referring page. We use these logs only to run the website securely and to defend against attacks, and they are deleted after a short period. The legal basis is our legitimate interest in a secure, working website (Art. 6(1)(f) GDPR).

Page view counts

To learn which pages are useful, our own server counts page views. For each view we store the page, the time, the domain of the website that linked to us, and the campaign tags (the utm_ parameters) if the link had any. We do not store your IP address or browser details, set no cookies and build no profiles. Search engine crawlers are not counted.

Free self-check prompt

If you ask for our free self-check prompt, we store your email address, the time, the page that linked to us and the campaign tags if the link had any. We use the address only to check in with you once, a few days later, to ask how it went. We send nothing else, and we delete the address on request. The legal basis is your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time.

Cookies and fonts

This website sets no cookies. Fonts are served from our own server, so your browser makes no requests to Google or other font providers.

When you book a review

Booking details

When you book, we receive your name, email address, the confirmation you ticked, the page you came from with any campaign tags, the price and start date shown to you, and whatever else you choose to give us: your app’s address, a link to your code, the tools you used and your notes. We use this to deliver the service, to contact you about it and to send invoices. We store it on our server and in our email inbox. The legal basis is the performance of our contract with you (Art. 6(1)(b) GDPR).

We keep booking details for as long as we need them to deliver the service and answer follow-up questions. Records we need for accounting are kept for as long as the law requires, which in Switzerland is ten years.

Payments

Payments are handled by Stripe. You enter your card details on Stripe’s checkout page, not on ours, and we never see your full card number. Stripe processes your payment data on our behalf and, for its own purposes such as fraud prevention and legal compliance, as a controller under its privacy policy.

Your source code

We access your code only to perform the service you booked. We do not publish it or share it with anyone except the service providers below, who process it on our behalf.

To work quickly, we run automated tools and use an AI provider to analyse your code. We only use AI providers whose terms do not allow them to train their models on your code. Some of these providers are based outside Switzerland and the EU, for example in the United States. Where that is the case, we rely on recognised transfer mechanisms such as the EU-U.S. and Swiss-U.S. Data Privacy Frameworks or standard contractual clauses. We tell you which providers we currently use on request.

If your code or data contains personal data about your own users, we process it only on your behalf and only to perform the service. When we prove a problem on your live app, we use our own test accounts and only look at the data that problem exposes; screenshots in your report are cropped or blurred so they show no more personal data than needed. We delete our working copy of your code within 7 days of delivering the final report.

Service providers

We use the following categories of providers, who process data on our behalf or as separate controllers: our hosting provider (website and booking records), our email provider (messages and reports), Stripe (payments) and our AI provider (code analysis).

Your rights

You can ask us at any time which personal data we hold about you, and ask us to correct or delete it, to restrict or stop processing it, or to send it to you in a portable format. Where processing is based on consent, you can withdraw it at any time. Email us at the address above.

You can also lodge a complaint with a supervisory authority. In Switzerland this is the Federal Data Protection and Information Commissioner (FDPIC). In the EU, it is the authority in your country of residence.

Data security

We use appropriate technical and organisational measures to protect your data against loss, misuse and unauthorised access, including encrypted connections (HTTPS) for this website.

Changes

We update this policy when our processing changes. The current version is always on this page.