Privacy policy

TWOALPS is a mountain magazine you can read on the web and in the iOS app. This policy explains what personal data we handle, why, and what you can do about it. We keep it short because we collect little.

Who is responsible

TWOALPS is the controller of the data described here. For anything about your data, write toprivacy@twoalps.com.

Reading needs no account

You can read every post without signing in. When you do, we do not store anything that identifies you. Our hosting provider processes your IP address for the time needed to deliver the page and to protect the service from abuse.

What we store, and why

• Account. If you sign in with Apple or Google, our login provider stores your email address and the identifier of that login. We use it only to recognise your account. Legal basis: performing the service you asked for.
• Saved posts. The list of posts you save and when you saved each one, so you can read them later on any device. Legal basis: performing the service you asked for.
• Notifications. If you turn them on in the app, we store your phone's notification identifier, your reading language and whether notifications are enabled, to tell you when a new post is out. This works without an account. Legal basis: your consent, which you can withdraw at any time in the app settings.
• Usage statistics. We count page views on the web and post reads in the app in aggregate: how many times each post was opened each day, and nothing about who opened it. No cookies, no advertising identifiers and no profile of you. Legal basis: our legitimate interest in knowing which posts are read.

We do not sell your data, we do not show advertising, and we do not use your data for anything not listed here.

Embedded video

Some posts include video hosted by YouTube or Vimeo. Your device connects to that service to play it, and that service's own privacy policy applies to the playback.

Who processes data for us

• Cloudflare: hosting of the website and the API, and aggregate statistics.
• Supabase: login and database, in a European region.
• Apple: delivery of notifications to your iPhone.

These providers act on our instructions under data processing agreements. Where data leaves Switzerland or the European Economic Area, it is covered by the safeguards the law requires.

How long we keep it

Account data and saved posts are kept until you delete your account. A phone's notification identifier is removed when you turn notifications off, when you delete your account, or when Apple tells us it is no longer valid.

Your rights

You can access, correct, export and delete your data, and object to or restrict its processing. Two of these are one tap away in the app, under Settings:

• Export my data gives you a file with everything we hold about you.
• Delete account erases your account, your saved posts and your registered phones.

For anything else, write to privacy@twoalps.com. If you think we have handled your data wrongly, you can complain to your data protection authority: the FDPIC in Switzerland, or the authority of your country in the European Union.

Age

You must be at least 16 years old to create an account.

Changes

If this policy changes, the new version is published on this page with its date. If the change is significant and you have an account, we will tell you before it applies.