Privacy policy

MEconomy (“we”, “us”) operates the website meconomy.ch. For data protection enquiries write to privacy@meconomy.ch. Operator details are in the Impressum.

2.1 Comparison data (public)

Prices, features and provider details are read from the providers’ own public pages and from official publications. This is public information about offers, not personal data.

2.2 When you visit, without an account

• Cloudflare serves the site. Your browser asks it for every page, so it sees your IP address and browser details, as any web server does (section 5).
• Many pages load their data straight from our Supabase database in your browser, for example health insurance premiums, electricity tariffs and bank and card prices. The bank, card, mortgage and subscription pages ask for all published rows and send none of your choices.
• The mobile pages (the plan list, the best-of lists, a provider’s page and the site search) read the plans and their price history from our own address, /api/products, which Cloudflare serves. That read carries no choice of yours. Your browser asks Supabase directly for the same rows only when that read fails.
• To show premiums or tariffs, your browser asks Supabase for the rows that match your choices: on the health insurance pages the canton, premium region, age class, accident cover or deductible, and on the electricity pages the municipality, the consumption profile or the grid operator. These query details reach Supabase with each of those requests, together with your IP address and browser details, whether or not you sign in (section 5). MEconomy itself stores nothing about them.
• What you enter, such as the people on the health insurance page, is kept in your browser. Section 3 lists every entry. Apart from the values that choose which rows to ask for (the point above), none of it is sent to Supabase while you are not signed in.
• Preis-Radar, our retail price tracker, is not open yet. When it opens, a click on a retailer link there will be counted (section 2.4).

2.3 Account data (when you sign up)

• Email address: for signing in and for the confirmation and password-reset emails.
• Session: kept by Supabase Auth, and stored in your browser (section 3).
• Household plan and watched plans: the offers you add to your plan or watch for price changes, each with its provider, plan name, the price on the day you added it, the number of lines and the date.
• Household details, if you entered them: ages, income, wealth, church membership, housing and the other details listed in section 3, kept as one record per account.

We do not ask for a phone number, and we do not call you.

2.4 Clicks on retailer links in Preis-Radar

Preis-Radar is a retail price tracker that is not open yet, so this section describes what will happen once it is. A retailer link in Preis-Radar will go to meconomy.ch/go/ followed by an offer number. That address will look up the retailer’s page and send you there. For each click we will store the offer number, the time, a short language tag such as de-CH (from the link or your browser’s language setting), the website name of the page you came from (the name only, with no page path or search terms) and a coarse type of visitor (person, bot or unknown), worked out from your browser’s identification. We will store no IP address and no account number, and we will set no cookie. The records will be kept for our own statistics, and only we will be able to read them.

2.5 Analytics and logs

• We use no analytics: no Google Analytics, no tracking pixels, no analytics cookies.
• Cloudflare offers an optional web-analytics script. It is not part of this site’s code, and the site’s Content Security Policy (script-src 'self') blocks scripts from other addresses, so that script cannot run on meconomy.ch and no analytics data is collected. If your browser’s developer console shows a blocked Cloudflare script, that is the policy at work.
• Standard server logs (IP address, browser details) may be kept for up to 30 days for security.

The site writes the entries below to your browser’s storage and sets no cookies. They belong to your browser: you can read and delete them at any time in your browser’s site data settings. Most never leave it. Where the last column says so, the same data is also copied to your account while you are signed in. The values that choose which rows to show (section 2.2) are part of the request to Supabase. If storage is blocked, for example in a private window, the site still works and simply does not remember.

• meconomy.health.people.v1

  The people on the health insurance page: a name or label you typed (up to 40 characters), age group, birth year, deductible, accident cover, current insurer, plan and model, the premium on your letter and a deductible you chose. It keeps your people there on the next visit.

  Local storage · Stays in your browser

• meconomy.health.map.v1

  Your place on the front page, the health insurance pages and the premium map: the municipality you live in, up to three you compare and your insurer.

  Local storage · Stays in your browser

• meconomy.supplementary.v1

  The supplementary insurance policies you entered: insurer, product name, kind of cover, start, notice period and end. No health data and no names.

  Local storage · Stays in your browser

• meconomy.plan.v1

  Your household plan: the offers you added, each with its provider, plan name, the price shown on the day you added it, the number of lines and the date. Signed in, the plan is copied to your account.

  Local storage · Copied to your account when you are signed in

• meconomy.plan.owner.v1

  The account this browser last copied your plan with. After you sign out, it keeps the next person on the same computer from seeing your plan.

  Local storage · Stays in your browser

• meconomy.plan.held.v1

  Which picks of your plan your account is known to hold, so that signing out removes only those from this browser.

  Local storage · Stays in your browser

• meconomy.plan.bar-note.dismissed.v1

  A “1” once you closed the note that explains the plan bar.

  Local storage · Stays in your browser

• meconomy.current.v1

  What you pay today, one entry per category: provider, plan, the price a month or a year and the day you set it.

  Local storage · Stays in your browser

• meconomy.household.v1

  Your household details: ages, income, yearly payments into pillar 3a, days of childcare, marital status, net wealth, church membership, electricity use, heating, housing (rented or owned), workplace postcode, whether you have a car and the dates your contracts end. Signed in, it is copied to your account.

  Local storage · Copied to your account when you are signed in

• meconomy.household.synced.v1

  Only when signed in: your account, the time and a copy of the household details at the last copy to your account, so the newer of the two is kept.

  Local storage · Stays in your browser

• meconomy.car.v1

  The car you enter on the vehicle tax page: fuel, engine power and size, weights, CO₂ emissions, energy label and first registration. The where-to-live page reads it too.

  Local storage · Stays in your browser

• meconomy.where.places.v1

  The places you compare on the where-to-live page.

  Local storage · Stays in your browser

• meconomy.where.rents.v1

  Rents you typed for compared places, by municipality.

  Local storage · Stays in your browser

• meconomy.portal.rail.v1

  Whether you collapsed the side menu of your dashboard.

  Local storage · Stays in your browser

• meconomy:theme

  The colour theme you chose in the dashboard: light, dark or system. Used only while the preview of the dark theme is switched on.

  Local storage · Stays in your browser

• meconomy:theme-unlocked

  A “1” once you opened your dashboard (/dashboard) with ?theme=dark in the address: the preview of the dark theme. Opening it with ?theme=light removes it.

  Local storage · Stays in your browser

• sb-wzfqqgwknqmglqbqdmsy-auth-token

  Your sign-in session (access and refresh token), written by Supabase’s sign-in library so that you stay signed in. It exists only after you sign in and is removed when you sign out.

  Local storage · Sent to Supabase with your requests while you are signed in

• sb-wzfqqgwknqmglqbqdmsy-auth-token-code-verifier

  A one-time secret that Supabase’s sign-in library writes when you ask for a confirmation or password-reset link. Only this browser holds it, so only this browser can turn the link in the email into a sign-in. Your browser sends it to Supabase once, when you open the link, and it is then removed. It is also removed when you sign out.

  Local storage · Stays in your browser

• sb-wzfqqgwknqmglqbqdmsy-auth-token-flow-…-code-verifier

  The same secret, kept once for each link you asked for (up to five at a time). The number in the name is a random one that the library picks. Once its link has been opened it is of no use, but it stays until you sign out or newer ones push it out.

  Local storage · Stays in your browser

• sb-wzfqqgwknqmglqbqdmsy-auth-token-flows-code-verifier

  The list of the random numbers in the entries above, so that the library can remove them. It holds no secret and goes with them when you sign out.

  Local storage · Stays in your browser

• meconomy.auth.recovery.v1

  For 30 minutes and in this tab only: a mark that you arrived through a password-reset link, so the form for a new password opens only then.

  Tab storage · Stays in your browser

• remix-router-transitions

  Written by the site’s page router when you leave or close the page, after you moved between pages in this tab with an animated page change: the paths of pages you left and the paths of pages you went to from them (for example /mobile and /privacy). It holds no personal data, lets Back and Forward repeat the same animation, and stays until you close the tab.

  Tab storage · Stays in your browser

Earlier versions of the site wrote the entries below. Today’s site no longer writes them. It reads them once, when it first builds your household details, and leaves them in place.

• meconomy.where.v1

  The electricity settings of the earlier map.

• meconomy.where.family.v1

  Family entries of the earlier map: children, training, employers.

• meconomy.where.tax.v1

  Tax entries of the earlier map: incomes and ages.

• meconomy.where.owner.v1

  Whether you own your home and its insured value, on the earlier map.

• meconomy.where.work.v1

  The workplace postcode of the earlier map.

• meconomy.where.car.v1

  Whether the earlier map counted your car.

• meconomy.tax.v1

  The household of the earlier tax page: status, children, wages, pillar 3a, wealth, church and rent.

• meconomy.plan.save-prompt.dismissed.v1

  A “1” once you closed an earlier prompt to save your plan.

• Consent: when you create an account, you consent to the processing described here.
• Contractual necessity: account data is needed to provide your household plan, watched plans and alerts.
• Legitimate interest: server logs for security and abuse prevention, and, once Preis-Radar is open, counting clicks on retailer links.

Your account data is stored on servers in Zürich, Switzerland. Resend and Cloudflare may process the data listed for them outside Switzerland, including in the USA. We do not sell or rent personal data to anyone.

• Account data: kept while your account exists, and deleted within 30 days after you ask us to delete the account.
• Household plan and watched plans: removed when you remove an item, and deleted with your account.
• Household details: replaced when you change them, and deleted with your account.
• Browser entries: kept until you delete them in your browser. When you sign out, your plan and household details leave the browser if your account holds them.
• Clicks on retailer links (once Preis-Radar is open): will hold no IP address, account number or other identifier.
• Server logs: purged after 30 days.

Under the Swiss new Federal Act on Data Protection, you have the right to:

• Access: ask for a copy of all personal data we hold about you.
• Rectification: have inaccurate personal data corrected.
• Deletion: ask for your account and all data tied to it to be deleted.
• Data portability: receive your data in a structured, machine-readable format.
• Objection: object to processing based on legitimate interest.

To use these rights, write to privacy@meconomy.ch. This is the one address for access, export and deletion requests. We respond within 30 days, and we delete an account within 30 days of a request to delete it.

MEconomy sets no cookies. We use no advertising, analytics or tracking cookies, and so the site has no cookie banner. What the site keeps in your browser is listed in section 3.

• All data in transit is encrypted: the site works over HTTPS only, and HSTS makes your browser insist on it.
• Database access is protected by Row-Level Security (RLS) policies.
• API keys are rotated and stored in secure environment variables.
• Security headers (HSTS, CSP, X-Frame-Options) are enforced on all pages.

If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC).

We may update this policy from time to time. Changes are posted on this page with a new date at the top. Continued use of MEconomy after a change means you accept the revised policy.