How we handle personal data on mont3.ch. We keep this short and honest: this is a showcase site, so we collect as little as possible.
The controller for this website is Mont3 Suisse SAGL, Via Alberto Ciseri 3, 6900 Lugano, Switzerland. For any privacy request, contact hello@mont3.ch.
This policy is governed by the Swiss Federal Act on Data Protection (nLPD/FADP) and, for visitors in the EU/EEA, the GDPR.
Our web server records each request (IP address, timestamp, requested URL, referrer and browser user-agent). We use this only to operate and secure the site - detecting abuse, blocking automated attacks and diagnosing errors. Legal basis: our legitimate interest in a secure, working site (nLPD art. 31 / GDPR art. 6(1)(f)). Retention: logs are rotated and deleted after 14 days.
On endpoints that accept input (the Ask generation API, login, contact-gated pages) we temporarily store request counters keyed to your IP address to limit repeated attempts. These counters expire automatically - within minutes for per-minute limits, within 24 hours for daily limits. Legal basis: legitimate interest (security).
We set strictly necessary, first-party cookies only when needed - for example a csrftoken to protect form submissions and a session cookie if you sign in. These are required for the site to work securely and do not track you. No consent is required for them, but they are listed below for transparency.
Web fonts are served directly from our own servers (self-hosted). No font request, IP address or any other data is sent to Google or any other third party to display the site's typography.
If, and only if, you click "Accept analytics" in the cookie banner, we load Google Analytics 4 (Google Ireland Ltd / Google LLC). It sets analytics cookies (_ga, _ga_*) and measures aggregate usage (pages viewed, approximate location, device) to help us improve the site. Until you accept, Google Analytics is not loaded at all - no analytics cookies are set and no data is sent. You can withdraw consent any time via Cookie settings (also in the footer); clearing consent stops future collection. Legal basis: your consent (nLPD art. 6 / GDPR art. 6(1)(a)).
On our Ask page you can describe your company and have three build proposals generated for you. The brief you compose there (chip answers plus any free text, and your previous prompts on the same page), together with the language the page is shown in, is sent to Anthropic (Claude API, Anthropic PBC, USA) for the sole purpose of generating those proposals. Under Anthropic's commercial terms these inputs are not used to train models. We keep only short-lived technical logs (timestamp, IP, prompt length - not the text itself) for abuse prevention, deleted with our server logs. Legal basis: providing the feature you actively request (nLPD art. 31 / GDPR art. 6(1)(b)). Do not type personal or confidential data into the brief; if you prefer no processing at all, simply don't use that page.
| Name | Purpose | Type | Set when | Duration |
|---|---|---|---|---|
csrftoken | Protects forms against cross-site request forgery | Essential | Always | 1 year |
sessionid | Keeps you signed in | Essential | Only if you sign in | 2 weeks |
m3_consent_v1 | Remembers your cookie choice (local storage, not a cookie) | Essential | When you choose | Persistent (until you clear it or change your choice) |
mont3_lang | Remembers your language so we don't redirect you to another language version again | Essential | On your first visit | 1 year |
mont3-theme | Remembers your dark/light mode choice (local storage, not a cookie) | Essential | When you toggle dark mode | Persistent (until you clear it) |
mont3_splash_t | Prevents the intro animation from replaying (session storage, not a cookie) | Essential | After the intro animation | Until you close the tab |
_ga, _ga_* | Google Analytics - aggregate usage statistics | Analytics (optional) | Only after you accept | 2 years |
We do not sell your data and we do not use it for advertising. Data is shared only with the service providers above (Google, only with your consent, for analytics; Anthropic, only when you use the Ask page), which may process it in the United States under their standard contractual clauses. We otherwise disclose data only where required by law.
You may request access to, correction or deletion of your personal data, object to processing based on legitimate interest, and withdraw consent at any time. Write to hello@mont3.ch. You may also lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC), or your local EU supervisory authority.
We may update this policy as the site evolves; the "last updated" date above always reflects the current version.