Privacy policy — Groodle waitlist
Version 1.1 · 30.10.2026
The French version is authoritative. Read the French version
This policy explains which personal data we process when you visit groodle.ch and sign up to the waitlist: why, for how long, with whom, and what your rights are. It only covers the waitlist, since the rest of the service is not open. It will be completed before the opening.
1. Controller
SH GROUP SA, Swiss company limited by shares, UID CHE-110.580.456, registered office in Chêne-Bougeries (Geneva, Switzerland). Contact, including to exercise your rights: contact@groodle.ch.
SH GROUP SA has not appointed a data protection advisor (this is not mandatory for a private company in Switzerland).
2. Data we process
If you sign up as an individual
- your e-mail address;
- your neighbourhood (chosen from a list of Geneva neighbourhoods, or "Other");
- the language of the page (French or English), which becomes the language of the e-mails; you can change it on your status page;
- proof of your consent (box ticked and date).
If you sign up as a restaurant owner
- the name of the restaurant;
- your first and last name;
- your business e-mail address;
- your phone number, if you give it (optional);
- the language of the page and proof of your consent.
In both cases
- Personal link: after confirming, you receive a personal code. If you sign up through someone else's link, we record the link between the two sign-ups. That person only sees how many of their friends have confirmed, never who they are.
- Rewards programme: your points and tiers are calculated from your sign-up and from those made with your link. If you win the kit, we ask you by e-mail for a delivery address, which is used only for the shipment, is not stored in our database and is erased at the latest 30 days after delivery.
- Origin of the sign-up: if you arrive through a campaign link or a friend's link, that origin is recorded with your sign-up. Advertising tracking parameters are removed from the address.
- Fingerprint of your IP address: your IP address is never stored in clear in our database. We only keep an irreversible encrypted fingerprint (HMAC). It is used to limit the number of sign-ups per network and to detect abuse (bursts of sign-ups, signing yourself up through your own link).
- Link tokens for confirmation, status and unsubscribe: stored in hashed form, so they cannot be read.
- Visit counting: our own servers count openings of campaign links and personal links, with a pseudonymous visit identifier. No third-party analytics or advertising tool.
- Technical logs of our hosting providers (requests, errors), which may contain your IP address for a short time.
The forms ask for nothing else. No payment takes place on the website.
3. Why we process this data
| Purpose | Basis |
|---|---|
| Running the waitlist and sending you the confirmation e-mail | Your sign-up request and your consent |
| Sending you the opening announcement and news from Groodle | Your consent, which you can withdraw at any time |
| Managing the personal link (code, linking friends who sign up) | Your consent; our interest in making the service known |
| Knowing where sign-ups come from (campaign, friend) | Our interest in measuring our communication; you can refuse the attribution identifier (section 6) |
| Protecting the forms against bots and abuse | Our interest in securing the service |
| Restaurant owners: getting back in touch about the opening and the set-up of your restaurant | Your consent |
| Respecting your unsubscribe request | Your objection, which we must respect |
This table follows the Swiss Federal Act on Data Protection (FADP). If the EU General Data Protection Regulation (GDPR) applies to you, the bases above correspond to your consent, the performance of your request and our legitimate interests.
Your data is neither sold nor rented, nor used for third-party advertising. Groodle shows no advertising.
4. Double confirmation, e-mails and unsubscribing
- Your sign-up only counts once you click the confirmation link received by e-mail. The link is valid for 7 days.
- E-mails are sent from no-reply@groodle.ch.
- Each waitlist e-mail contains a one-click unsubscribe link, also offered by your e-mail app.
- After you unsubscribe, your sign-up is deleted, together with the referral links that concern you. To make sure we no longer write to you, we keep only an irreversible encrypted fingerprint (HMAC) of your address, never the address itself. You can sign up again later if you wish.
5. How long we keep data
| Data | Duration |
|---|---|
| Unconfirmed sign-up | Deleted after 7 days |
| Confirmed sign-up (individual or restaurant owner) | Until you unsubscribe. If it is never linked to a Groodle account, it is deleted one year after the waitlist closes, which happens 30 days after the service opens. If the service does not open, the waitlist is deleted at the latest one year after the project is abandoned. |
| Contact details of a restaurant owner taken over by our team for the set-up | Deleted 24 months after the last exchange if the restaurant does not join Groodle; a request not to be contacted is always respected |
| Rewards programme data | Same as the sign-up |
| Kit delivery address | 30 days after delivery at most |
| IP address fingerprint | Deleted with an unconfirmed sign-up; otherwise erased 30 days after confirmation |
| Address fingerprint after unsubscribing | For as long as your objection must be respected; signing up again removes it |
| Technical logs of hosting providers | 30 days at most |
| Cookies | See section 6 |
If you create a Groodle account when it opens with the same confirmed address, your sign-up is linked to your account. Its origin may then become your acquisition source, at the latest 30 days after the opening. How account data is kept will be described in the privacy policy of the service.
6. Cookies and browser storage
Groodle uses no advertising cookies and no third-party trackers.
| Name | Purpose | Duration | Necessary |
|---|---|---|---|
gro_wl_link | Remembers the campaign link you arrived through, to associate it with your sign-up | Session, not readable by scripts | Yes |
gro_consent | Remembers your choice about the attribution identifier | 12 months | Yes |
gro_utm | Keeps the campaign parameters of the address while they are removed from the visible address | 10 minutes | No |
gro_sid | Pseudonymous visit identifier, to count the same link opening only once | Session, not readable by scripts | No |
gro_anon | Pseudonymous attribution identifier, to find the origin of your sign-up or future account | 30 days | No |
gro_code | Remembers a friend's code to associate it with your sign-up | 30 days | No |
| Browser local storage | Remembers the section you chose (Individuals or Restaurants) | Until you clear it | Yes (convenience) |
Your choice. In line with the Swiss Telecommunications Act (art. 45c TCA), you are informed here and you can refuse the attribution identifier with the button below, with no effect on your sign-up. After a refusal, gro_anon is erased and no attribution identifier is set or read any more. You can also delete cookies in your browser.
Where your visit came from
When you arrive through a shared link or a QR, Groodle keeps a pseudonymous identifier for 30 days to know which link brought you. No advertising tracker or third-party analytics tool is used.
7. Who receives your data, and in which country
Only the members of our team who need your data can access it. Our technical providers process it on our behalf, following our instructions and under a data processing agreement:
| Provider | Role | Data | Country | Safeguard |
|---|---|---|---|---|
| Supabase | Database | Sign-up data | Switzerland (Zurich). Possible support access from the United States | Standard contractual clauses recognised by the Federal Data Protection Commissioner (art. 16(2)(d) FADP) |
| Vercel Inc. | Website hosting | Requests and logs, including IP address | Germany (Frankfurt) and United States | Germany: adequate protection recognised by the Federal Council. United States: company certified under the Swiss-U.S. Data Privacy Framework (art. 16(1) FADP, annex 1 DPO) |
| Resend | Sending e-mails | E-mail address, language, content of the e-mails | Ireland and United States | Ireland: adequate protection recognised. United States: standard contractual clauses recognised by the Federal Data Protection Commissioner (art. 16(2)(d) FADP) |
| Cloudflare, Inc. (Turnstile) | Protecting forms against bots | IP address and technical browser signals | United States and global network | Company certified under the Swiss-U.S. Data Privacy Framework (art. 16(1) FADP, annex 1 DPO) |
No advertiser or data broker has access to your data. We only disclose it to an authority where the law requires it.
8. Security
The data is stored in a database protected by strict access rules. Personal link tokens are hashed. Pages with a token are not indexed by search engines. The forms are protected against bots and abuse. No measure guarantees absolute security. In the event of a data breach that poses a high risk to you, we notify the Federal Data Protection Commissioner and, where necessary, the people concerned.
9. Your rights
You can ask for access to your data, have it corrected or deleted, object to its processing, withdraw your consent at any time (with no effect on the past) and receive your data in a common format. If the GDPR applies to you, you can also ask for the processing to be restricted.
Write to contact@groodle.ch. We may check that the request comes from you, for example by an e-mail to the address you signed up with. Our answer is free of charge and generally comes within 30 days. The unsubscribe link and the status page already let you withdraw your consent and change the language.
You can also contact the Federal Data Protection and Information Commissioner (FDPIC) in Bern. If you live in the European Union, you can also contact the authority of your country.
10. Age
The waitlist is reserved for people aged 16 or over. If a minor has signed up, write to us and we will delete the sign-up.
11. Changes
This policy may change, in particular when the service opens. The date of the last update appears at the top of the page. In the event of a significant change, people on the waitlist are told by e-mail.