Privacy Policy
Last updated: October 30, 2026
This is a translation for your convenience. In case of doubt, the German version applies.
This policy follows the Swiss Federal Act on Data Protection (FADP, in German “DSG”). It describes what is stored when you take the test and use the course, and why.
1. Controller
The controller is the provider of “securely attached”, whose name and address are given in the Imprint. Please send questions about data protection to hallo (at) securely-attached (dot) ch.
2. The attachment style test
For the test, we ask for your first name, age, relationship status and email address, and optionally for your gender and sexual orientation. Your answers, the scores calculated from them and your attachment style are stored on our server together with this information. We use it to show you your result, to email it to you and to link it to your account if you create one.
Gender and sexual orientation are optional, and “Prefer not to say” is always available. Under the FADP, sexual orientation counts as sensitive personal data. We use both only for the wording of your result, for example whether an example refers to a male or a female partner. They don’t change the scoring, never appear in any statistics together with your name and are never passed on. If you’d like them deleted, write to us.
Answers about attachment and relationships can be very personal. They are evaluated only for you, are not sold and are not passed on to third parties, including advertising platforms.
While you’re filling out the test, your browser keeps your progress in the tab’s session storage. It’s gone as soon as you close the tab or submit the test.
3. Account and course
For an account, we store your first name, your email address and, if you set one, your password as a secure hash. In the course, we store which lessons you completed and when, your entries (writing exercises, daily notes, worksheets, plans, barometer) and your purchases. Only your account can see these entries.
The number “others are working on this chapter right now” is counted across all accounts and shown only as a total, never with names.
4. Emails
We send you your test result and links to log in, to confirm your email address and to change your password. Only if you tick the box during the test or when creating your account to say that we may send you a personal offer and tips will you also receive suggestions and offers, such as a discount the day after. If you’ve already made a purchase, you won’t receive a discount email. Every such email contains an unsubscribe link.
The emails are sent through our hosting provider’s mail server (see section 7).
5. Signing in with Google
If you sign in with Google, Google gives us your name, your email address, confirmation that the address belongs to you, and a permanent identifier for your Google account. Nothing more. Google’s privacy policy (policies.google.com/privacy) applies to the sign-in itself. Google also processes data in the USA.
6. Cookie, our own statistics, abuse protection
We set a single cookie: the session cookie, which keeps you logged in and ties your visit together. It contains no advertising ID. There are no advertising pixels, no third-party analytics tool and no connection to Google Fonts. That’s why there’s no cookie banner either.
To understand how people find the site, we count visits ourselves, and only on our own server: which page or tagged link (for example an ad) your visit came from, which type of device you used (phone, tablet, computer) and which steps you took (opened the test, answered the first question, saw your result, opened checkout, created an account). We don’t store your IP address for this. If you take the test or create an account, we record which route brought you here, so we can see which ads and content really help. We don’t pass this information on.
To protect against password guessing and misuse of the test and emails, we count attempts per email address and per IP address. We delete these counters after a few days at the latest. For requested login links, we store the IP address until one week after the link has expired.
Server error messages are written to a log that only we read.
7. Hosting
The website and the database are hosted by Hostinger on servers in Europe. When delivering the pages, Hostinger necessarily processes information such as your IP address, the time and the page requested. We don’t analyze this information.
8. Payment
Payments are handled by Stripe (Stripe Payments Europe, Ltd., Dublin, Ireland). To pay, you’re redirected to Stripe’s payment page, and we pass on your email address, the plan you chose and the amount. You enter your payment details directly with Stripe; they never reach this website. Stripe only sends us confirmation that the payment went through. Stripe also processes the data itself, for example to prevent fraud and to meet legal obligations, and may transfer it to the USA for these purposes. You can read more in Stripe’s privacy policy at stripe.com/ch/privacy.
9. How long we keep data
- Test result, account and course entries: until you request deletion.
- Purchase records: ten years, as required by the Swiss Code of Obligations (Art. 958f CO).
- Abuse counters and login links: see section 6.
- Our own statistics on visits and steps: 14 months at most.
10. Your rights
You can ask for information about your data and have it corrected, handed over or deleted. An email to hallo (at) securely-attached (dot) ch from the address of your account is all it takes. You can unsubscribe from marketing emails using the link in each of them. You can also lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC, edoeb.admin.ch).