Privacy policy

Last updated: 8 October 2026

This policy explains which personal data RequestGuard processes, for what purpose, and your rights under the Swiss Federal Act on Data Protection (FADP/nDSG) and, where applicable, the EU GDPR.

Controller

RequestGuard
[Street, postcode, city, Switzerland]
Email: requests@requestguard.ch

1. Your customer account

When you create an account we store your name, company, email address, billing address, a hash of your password, your invoices and payment status. We use this data to provide the service, invoice you and contact you about your account. Legal basis: performance of the contract.

2. Data from protected websites

The RequestGuard plugin sends us, for every request to your website: date and time, IP address, approximate country (if your host provides it), requested URL, HTTP method and status, response time, user agent, referrer, the username of logged-in users, and submitted form fields. Passwords, tokens, nonces, keys, cookies and payment fields are replaced with “[redacted]” on your server before transmission. For file checks we receive file paths and short descriptions of findings — never file contents.

For this data you are the controller and we act as your processor: we process it only to detect attacks, block them, show you statistics and send you alerts. You must inform your visitors in your own privacy policy. Raw request logs are deleted after 30 days; aggregated statistics without IP addresses are kept up to one year.

3. Payments

Payments are handled by [zahls.ch / Payrexx AG, Switzerland] (TWINT, cards, PostFinance) and Revolut (Revolut Pay, cards). We receive the payment status and reference, never your card or account details.

4. Emails

We send transactional emails (alerts, reports, invoices, password resets) through [your email provider]. You can change alert and report settings in your account at any time.

5. Hosting and storage

The service and its database are hosted by [hosting provider, country].

6. This website

This website does not use cookies for tracking and loads no third-party fonts or analytics. The customer panel uses one strictly necessary session cookie to keep you signed in.

7. Your rights

You can request access to, correction or deletion of your personal data, and you can close your account at any time in the panel, which deletes your websites’ data. Contact us at the email address above. You may also complain to the Federal Data Protection and Information Commissioner (FDPIC).