Privacy Policy

As of: May 2025 — GDPR and Swiss FADP compliant

1. Data Controller

istyle.ch
E-Mail: info@istyle.ch
Website: www.istyle.ch

2. Principle: No Data Processing

The QR-Secure tool is designed as a zero-knowledge application. All cryptography runs client-side in your browser via the native Web Crypto API. Neither the plaintext, nor the password, nor the generated ciphertext is ever transmitted to our servers.

3. Server Logs

Our hosting provider (Plesk/Apache) generates technical access logs required for infrastructure operation and security. These contain:

  • IP address (possibly truncated)
  • Date and time of access
  • Accessed URL (without fragment — URL fragments such as #ISQR1:… are never sent to the server)
  • HTTP status code and data volume
  • Referrer and user agent

Important: The encrypted ciphertext in Decrypt Link format (/decrypt#ISQR1:…) is in the URL fragment (after the #). This part of the URL is never transmitted by the browser to the server. It is structurally not loggable.

Logs are automatically deleted after 30 days.

4. Cookies

This website sets no cookies — neither technically necessary ones, nor tracking cookies, nor advertising cookies. No cookie banner is needed because nothing is set.

5. Analytics and Tracking

No tracking scripts are loaded on the tool pages (/{lang}, /{lang}/decrypt, /{lang}/how-it-works). No Google Analytics, no Matomo, no Facebook Pixel, no external resources of any kind.

6. External Resources

This website loads no external resources from third parties (no CDN, no Google Fonts, no external libraries). All JavaScript and CSS files are served from our own server.

The Content Security Policy (CSP) enforces this technically: default-src 'self' prevents loading of external content.

7. Cryptographic Security

The Web Crypto API used is an open W3C standard. AES-GCM 256-bit and PBKDF2-SHA-256 are established, independently reviewed algorithms. The source code is viewable in the browser and can be independently audited.

8. Your Rights (GDPR Art. 15–22 / Swiss FADP Art. 25–32)

As we store no personal data, there is nothing to disclose, correct, delete, or transfer. For questions about infrastructure processing (server logs), please contact us at info@istyle.ch.

9. Changes to This Policy

This page will be updated for material changes to the tool or data processing practices. The "As of" date at the top of this page indicates the last modification date.