Plain English, no surprises. Here's exactly what we collect and why.
Last updated 24 July 2026 · Swiss nDSG · GDPR-aligned
ChooChoo is operated by Nysa Ventures Sàrl (UID CHE-326.785.344), Anières, Geneva, Switzerland, the data controller under the Swiss nDSG. Contact: hello@choochoo.ch
Swiss nDSG (in force 1 September 2023). GDPR principles apply where users are located in the EU/EEA.
Parents: email, first name, commune/postcode, child age range(s), activity interests, home language(s), saved activities, browsing behaviour, newsletter consent. Accounts are for adults (18+) only. We do not collect data directly from children and do not build child profiles.
Providers: organisation name, contact name, email, phone, legal status, location, activity details, supporting documents.
Automatic: IP address, device/browser info, pages visited, interaction data, cookies.
Platform operation (contract / legitimate interest). Personalisation (legitimate interest) - ranking results by age, location, language, behaviour. Marketing (explicit consent only) - unsubscribe any time. Analytics (legitimate interest). Provider management (legitimate interest).
We do not sell or rent your data. Educators only receive your details if you explicitly request contact. A small set of service providers process data on our behalf under a data processing agreement: Airtable (our database), Netlify (hosting and functions), Stytch (email sign-in), Google Analytics and reCAPTCHA (analytics and spam protection), Plausible (cookieless analytics, hosted in the EU), Resend (email delivery), and Sentry (error monitoring). Separately, if you choose to sign in with Google, Google shares your name and email address with us.
Most of our service providers are US-based. Transfers are covered by the Swiss-US Data Privacy Framework, with Standard Contractual Clauses as a fallback where required. Plausible is the exception: it processes and stores all data in the EU.
Parent data: active period + 30 days post-deletion request. Provider data: active period + up to 12 months. Google Analytics: up to 14 months. Error reports: up to 12 months.
Access, correction, deletion, objection, portability, consent withdrawal. Email hello@choochoo.ch. Complaints to the FDPIC: www.edoeb.admin.ch
We rank activities using location, child age range, saved activities, and browsing behaviour. No legal or similarly significant effects. Opt out any time by emailing us - you'll still see all activities, just unranked.
Necessary - always on. Analytics (Google Analytics, consent required) - truncated IP, usage patterns only. If you decline analytics cookies, we don't set them, but Google may still estimate aggregate visit patterns using anonymised modelling. We also use Plausible, which counts page views without cookies and stores nothing at all on your device, so it runs whether or not you accept cookies and there is nothing to switch off. Marketing - not used. Withdraw consent any time via the cookie banner or browser settings.
This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.
Appropriate technical and organisational measures in place. No internet service can guarantee absolute security.
ChooChoo is for parents and carers. Accounts are adults-only (18+). Any child data collected without appropriate authority will be deleted immediately.
Current version always at www.choochoo.ch/privacy. Material changes notified where required by law.