Privacy Policy

Last updated 11 September 2026

Who is responsible

Worlds Worth Coloring (Worlds Worth Coloring, Dufourstrasse 49, 8008 Zürich), reachable at hello@worldsworthcoloring.com, is responsible for the processing of personal data described here. This policy follows the Swiss Federal Act on Data Protection (FADP) and, where it applies, the EU GDPR.

What we collect and why

When you buy a set we receive from Stripe your name, email address, billing address, company name and VAT number if you entered them, and the payment status. We use this data to deliver the file, issue the invoice, answer your questions and keep the accounting records the law requires. Card numbers are processed by Stripe only; we never see them. When you send the request form or email us, we keep what you wrote in order to answer you. Our web server keeps standard access logs (IP address, time, page requested) for security and troubleshooting, deleted after 30 days at the latest. A small cookie remembers the language you chose.

Legal basis

Processing is necessary to perform the contract with you (delivery, invoicing), to comply with legal obligations (bookkeeping, 10 years under Swiss law), and for our legitimate interest in running the website securely and answering enquiries.

Who receives data

Stripe Payments Europe, Ltd. (Ireland) and its affiliates process the payment and send the receipt and invoice; see stripe.com/privacy. Railway Corp. (USA) hosts the website and stores order records and files. Resend (USA) delivers our emails. Gandi (France) provides the domain and our mailbox. Google (Google Fonts) delivers the typeface used on this site, which means your browser requests the font file from Google's servers. We do not sell or share personal data for advertising.

Transfers outside Switzerland and the EU

Some providers above process data in the United States. They are bound by contractual safeguards (EU Standard Contractual Clauses or the EU-US and Swiss-US Data Privacy Framework).

Cookies and tracking

We count page views on our own server so we know which sets people look at. No third-party analytics, no advertising trackers, no cookie for counting, and nothing stored that identifies you: your IP address and browser are combined into a hash with a secret that is regenerated every day and never saved, which lets us count a visitor once per day and makes it impossible to recognise you tomorrow. The site sets one cookie, to remember your language. Stripe sets cookies on its own checkout page for fraud prevention.

Links in our emails

If you reach this site from an email we sent your restaurant, the link carries a short code that tells us which restaurant we wrote to. We use it only to see whether our message reached you, and whether the sample page was downloaded. It is not shared, not used for advertising, and we delete it on request: write to ${MAIL}.

How long we keep data

Order and invoice data: 10 years, as required by Swiss bookkeeping law. Requests and email correspondence: until your request is settled, then no longer than 2 years. Server logs: 30 days.

Your rights

You can ask us for a copy of your data, ask us to correct or delete it, or object to a processing. Write to hello@worldsworthcoloring.com. If you are in the EU you may also complain to your data protection authority; in Switzerland the competent authority is the Federal Data Protection and Information Commissioner (FDPIC).

Changes

We update this policy when the way we work changes. The date at the top tells you when it was last revised.