Privacy policy

Last updated 25 October 2026

This page explains which personal data swim-events.com processes, why, who helps us with it and what your rights are. We collect as little as we can: you can browse every event without an account, and the site sets no tracking cookies.

Who is responsible

The site is run by:

Write to this address for any question about your data or to use the rights described below. We process personal data under the Swiss Federal Act on Data Protection (FADP) and, where it applies to you, the EU General Data Protection Regulation (GDPR).

When you visit the site

• Hosting: the site is served by Netlify. Like every web server, it receives your IP address, browser type and the page you ask for, and keeps these in server logs for a short time to deliver the site and to keep it secure.
• The event list: your browser loads the events from our database at Supabase, hosted in the EU (Frankfurt, Germany). This request also passes your IP address and browser details, which Supabase keeps in its logs for a short time.
• Visitor statistics: we count visits with Simple Analytics, a service based in the Netherlands that sets no cookies and collects no personal data. It doesn't store your IP address and can't recognise you on a later visit. We only see totals, such as how many people opened a page.
• Your settings: when you switch between light and dark mode, your browser stores that choice on your own device (local storage). It isn't sent to us.
• Add to calendar: if you add an event to Google Calendar, Outlook or another online calendar, that service opens in a new tab and its own privacy policy applies. Downloading an .ics file stays on your device.
• Event websites: event names link to the organisers' websites. Those sites are not ours, and their own privacy policies apply.

We process this data because we have a legitimate interest in running a secure, working site and understanding how it is used (GDPR Art. 6(1)(f)).

When you create an account and submit an event

• Your email address: you sign in with a one-time code sent to your email address, without a password. We use the address to sign you in, to tell you whether your submitted events were accepted, and to contact you about your submissions.
• Your profile: an optional display name and organisation, and the date you accepted the terms of service.
• Your submissions and claims: the event details you send us, events you claim as their organiser, any note you add, the date you sent them and our decision.
• Staying signed in: after you sign in, your browser keeps a sign-in token on your own device (local storage), so you don't need a new code on every visit. Signing out removes it.
• Sign-in records: when you signed in, and the IP address and browser used, to keep accounts secure and to stop abuse.
• Spam check: the sign-in step uses Cloudflare Turnstile to tell people from automated programs. Cloudflare looks at your IP address and technical details of your browser for this check. It doesn't show image puzzles, and the result is only used for the check.

To check that a submission or claim really comes from the organiser, we compare it with information the organiser publishes, such as their website, and may contact the organiser through their published contact details. When we do, we only share what's needed for the check, such as your name or email address and the event.

We process this data to provide the account and the listing you asked for (GDPR Art. 6(1)(b)), and to keep the site free of spam and abuse (GDPR Art. 6(1)(f)).

Events we publish are visible to everyone. Your email address, profile and notes are never shown on the site.

Services we use

These companies process data on our behalf, only for the purposes above and bound by data processing agreements:

• Netlify (Netlify, Inc., USA): hosting the site.
• Supabase (Supabase, Inc., USA, with our data hosted in Frankfurt, Germany): the event database, accounts and submissions.
• Simple Analytics (Simple Analytics B.V., Netherlands): visitor statistics without personal data.
• Resend (Resend, Inc., USA): sending sign-in codes and emails about your submissions.
• Cloudflare (Cloudflare, Inc., USA): the spam check on the sign-in step.

Some of these companies are based in the USA or may process data there. Where that happens, the transfer relies on the Swiss-US and EU-US Data Privacy Framework for certified companies, or on standard contractual clauses approved for this purpose. We don't sell your data or share it with advertisers.

How long we keep data

• Server and database logs: a short time, as set by Netlify and Supabase, usually a few days.
• Your account and profile: until you delete your account.
• Submissions marked as spam: 7 days.
• Submissions we didn't accept, or that you withdrew: 90 days.
• Accepted events stay on the site as part of the list of past events. If you delete your account, they stay published, and your submissions are kept without any link to you.
• Cancelled events are removed after their original last day.
• Emails you send us: as long as needed to answer them and for any follow-up.

Your rights

You can ask us at any time to:

• tell you which personal data we hold about you and give you a copy;
• correct data that is wrong;
• delete your data, or delete your account yourself on the Account page once accounts are available;
• restrict how we use your data, or object to it;
• give you your data in a common electronic format.

Write to info@proswimworkouts.com. We may ask you to confirm that the request comes from you. If you think we handle your data unlawfully, you can complain to the Swiss Federal Data Protection and Information Commissioner (FDPIC) or, if you live in the EU, to the data protection authority in your country.

Changes to this policy

We update this page when the site or the services we use change. The date at the top shows the latest version. If a change affects account holders significantly, we tell them the next time they sign in.