Plain English, no surprises. Here's exactly what we collect and why.
Last updated 24 July 2026 · Swiss nDSG · GDPR-aligned
ChooChoo is operated by Nysa Ventures Sàrl (UID CHE-326.785.344), Anières, Geneva, Switzerland, the data controller under the Swiss nDSG. Contact: [email protected]
Swiss nDSG (in force 1 September 2023). GDPR principles apply where users are located in the EU/EEA.
Parents: email, first name, commune/postcode, child age range(s), activity interests, home language(s), saved activities, browsing behaviour, newsletter consent. Accounts are for adults (18+) only. We do not collect data directly from children and do not build child profiles.
Providers: organisation name, contact name, email, phone, legal status, location, activity details, supporting documents.
Automatic: IP address, device/browser info, pages visited, interaction data, cookies.
Platform operation (contract / legitimate interest). Personalisation (legitimate interest) - ranking results by age, location, language, behaviour. Marketing (explicit consent only) - unsubscribe any time. Analytics (legitimate interest). Provider management (legitimate interest).
We do not sell or rent your data. Educators only receive your details if you explicitly request contact. A small set of service providers process data on our behalf under a data processing agreement: Airtable (our database), Netlify (hosting and functions), Stytch (email sign-in), Google Analytics and reCAPTCHA (analytics and spam protection), Resend (email delivery), and Sentry (error monitoring). Separately, if you choose to sign in with Google, Google shares your name and email address with us.
Our service providers are US-based. Transfers are covered by the Swiss-US Data Privacy Framework, with Standard Contractual Clauses as a fallback where required.
Parent data: active period + 30 days post-deletion request. Provider data: active period + up to 12 months. Analytics: up to 14 months. Error reports: up to 12 months.
Access, correction, deletion, objection, portability, consent withdrawal. Email [email protected]. Complaints to the FDPIC: www.edoeb.admin.ch
We rank activities using location, child age range, saved activities, and browsing behaviour. No legal or similarly significant effects. Opt out any time by emailing us - you'll still see all activities, just unranked.
Necessary - always on. Analytics (Google Analytics, consent required) - truncated IP, usage patterns only. If you decline analytics cookies, we don't set them, but Google may still estimate aggregate visit patterns using anonymised modelling. Marketing - not used. Withdraw consent any time via the cookie banner or browser settings.
This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.
Appropriate technical and organisational measures in place. No internet service can guarantee absolute security.
ChooChoo is for parents and carers. Accounts are adults-only (18+). Any child data collected without appropriate authority will be deleted immediately.
Current version always at www.choochoo.ch/privacy. Material changes notified where required by law.