Privacy notice

Version: 15 October 2026

Who is responsible

Ondra Vaniš, Via Vedò 20, 6963 Pregassona, Switzerland. I operate AsAUser.app as a private individual. For privacy questions or requests, contact: info@asauser.app.

What we use and why

We use your email address, display name, password hash or linked sign-in identity, sessions and security checks to provide and protect your account. We store your collections, memberships, invitations, stories and editing attribution to provide collaboration. Subscription status and payment references support billing. The demo stays in the current browser tab and is cleared on refresh or close.

Cloudflare handles network and request information, including IP addresses and requested URLs, to deliver the website and diagnose failures. Application security counters use hashed identifiers.

The operator and service administrators have operational access. Collection members see contributor names and email addresses. Anyone can view and export public collections; public views hide contributor email addresses. Do not add confidential information to public collections.

Service providers and international processing

Cloudflare hosts the application, database and operational logs. The database is configured in its Eastern Europe region; this is not a guarantee of storage in Switzerland or in a particular city. Requests and provider operations can be processed internationally, including in the United States. Cloudflare privacy policy.

Lettr processes recipient email addresses and account or invitation messages when email delivery is enabled. Stripe processes payment information when you use Stripe checkout; we store payment references and subscription status rather than card details. Optional Google, Microsoft, GitHub and Facebook sign-in shares the identity information needed to connect your account. Each provider also processes information under its own privacy policy.

Password screening uses the Pwned Passwords range service without sending your password, full hash or email address. How passwords are handled.

Cookies and browser storage

An essential, secure session cookie keeps you signed in for up to seven days. Browser storage remembers your language and recent actor choices. Self-removal clears this browser’s actor-history cache for the account. The application does not use advertising trackers or marketing analytics.

Removal and retention

We record the terms version and acceptance time for account creation and checkout. These records are deleted with your account.

Account removal deletes your personal account data and removes identifying account references from retained contributions, subject to the retention periods below. For collection deletion and subscription cancellation, see the Terms and conditions.

Required billing and accounting records are retained for ten years from the end of the financial year, with application account references removed. We do not retain the full account for that purpose. Expired authentication, verification and retry records are deleted automatically.

We keep no additional backup or log archive. Cloudflare’s automatic database recovery history expires after seven days on its Free plan or thirty days on its Paid plan. Worker logs expire after three days on Free or seven days on Paid. A minimal removal journal containing only the former internal account UUID and removal/expiry times is kept for thirty days so removals can be reapplied before a restored database is served. It contains no name, email, credentials or content.

Copies already exported or received by others cannot be recalled. Text that people wrote about you is not reliably identifiable from account references; contact us to review such content. Payment and email providers may retain their own records under their policies and legal obligations.

Your choices and rights

You can edit your display name, change your password, export content when permitted and remove your account in Your profile. Contact us to request access, correction, deletion, objection or an available data export under applicable Swiss data-protection law. We may need proportionate proof of identity before responding. You can also contact the Swiss Federal Data Protection and Information Commissioner. Mandatory rights under any other applicable law remain unaffected.