Legal
Privacy policy
Last updated 4 November 2026
This policy explains which personal data codography processes on tessera-ds.ch, under the Swiss Federal Act on Data Protection (FADP) and, where it applies, the EU GDPR.
Controller
codography, Mustafa Al Awad, Kapplenstrasse 19, 3250 Lyss, Bern, Switzerland. Contact: hello@tessera-ds.ch.
What we collect
Purchases: Paddle processes your name, email, country, VAT ID and payment details as Merchant of Record. We receive your name, email, country and order details to deliver your licence.
Launch list: if you sign up and tick the box, your email address, to send launch news and release notes. You can unsubscribe at any time.
Support: the emails and contact-form messages you send us.
Forms: to stop abuse, we keep a scrambled (hashed) form of your network address or email address for up to one day when you send a form. We cannot turn it back into your address.
Website: no cookies and no advertising trackers. We count visits with a small counter of our own, on our own server: which page was opened, which website or link the visit came from, and whether the payment window or the Figma file was opened. It stores totals per day. It does not store your IP address, a cookie or anything that could recognise you, and it counts nothing when your browser sends Do Not Track or Global Privacy Control.
Who receives data
Paddle (payment and invoicing, United Kingdom), GitHub (repository access, United States), Figma (file sharing, United States), Resend (sends our emails: the licence email, the launch-list confirmation and release notes, United States) and Infomaniak (hosts this website and its order and launch-list records, Switzerland). Some of them process data outside Switzerland; they are bound by data protection agreements and the safeguards of the FADP.
How long
Order data: as long as Swiss accounting law requires (10 years). Launch list: until you unsubscribe; after that we keep only your address and the fact that you unsubscribed, so we never email you again, unless you ask us to delete it. Support messages: up to 2 years. The scrambled address that limits abuse of our forms: up to 1 day.
Your rights
You can ask what we store about you, and have it corrected or deleted, by writing to hello@tessera-ds.ch. You can also contact the Swiss Federal Data Protection and Information Commissioner (FDPIC).