Privacy Policy
Last updated: 8 October 2026 (draft, revised after a preliminary legal check, pending review by a lawyer)
This Privacy Policy explains how we process personal data when you visit cloudzh.app, purchase a CloudZH license or use the CloudZH license service. We process personal data in accordance with the Swiss Federal Act on Data Protection (FADP) and, where applicable, the EU General Data Protection Regulation (GDPR).
1. Controller
CloudZH
Email: support@cloudzh.app
2. What Stays on Your Server
CloudZH is self-hosted. Your files, media, app configurations, user accounts, logs and AI assistant conversations stay on your server. We have no access to them.
If you use the AI assistant, your API key is stored encrypted on your server, and requests go directly from your server to the AI provider you have chosen. These requests do not pass through our systems. The AI provider processes them under its own privacy policy.
3. Data We Process
3.1 Website
When you visit cloudzh.app, our server processes technical data such as your IP address, browser type, the requested page and the time of access in order to deliver the website and protect it against attacks. We do not keep access logs of the website. Technical error logs are kept for a short time and rotated automatically. Our hosting provider may process connection data for network security, such as protection against denial-of-service attacks.
Our website sets no cookies, uses no analytics and loads no content from third-party servers. The "Get CloudZH" button takes you to a checkout page hosted by Link (Sold through Link, LLC, a Stripe company), which is governed by Link's own privacy policy.
3.2 Purchase and Billing
Purchases are processed by Link (Sold through Link, LLC, a Stripe company), which sells the license as reseller and merchant of record. Link collects your payment details and processes them under its own privacy policy as an independent controller. We do not receive or store your card number or other payment credentials.
From Link, we receive the information we need to provide and manage your license:
- name and email address;
- country;
- your plan, number of licensed servers and payment status.
We use your name and email address to send you your license key and service emails through our email delivery provider (see section 5).
3.3 License Service
Each activated CloudZH server checks in with our license service once a day. For activation and check-ins we process:
- your license key (we store only a cryptographic hash and its last 5 characters);
- a server ID and the server's public instance key;
- a hardware fingerprint (a hash derived from the machine ID and the mainboard ID), used to detect copied installations;
- the server's hostname and the CloudZH version;
- the number of active user accounts, administrators and installed apps (numbers only, no names);
- the IP address and time of each check-in.
Your media, file names, user names, passwords and app settings are not transmitted.
Copy detection. If the license service detects that the same activation is used on different hardware, it may automatically deactivate the copy. This decision is made automatically to protect our licensing. If you believe it was a mistake, contact support@cloudzh.app. We will review the case personally and reactivate your server if the decision was wrong.
The license service and this website run on a virtual server that we rent from BlazingFast, A.S.A.S.S.U. Lda., Taipa, Macau. The server is located in the Netherlands. Encrypted backups of the license database are stored on our own server in Switzerland.
3.4 Support
When you contact us, we process the information you provide, such as your name, email address and the content of your message. Emails sent to support@cloudzh.app are forwarded by Cloudflare to our mailbox.
3.5 Feedback from the Dashboard
If an administrator sends feedback or a bug report from the dashboard, we receive the title and text of the message, an optional contact detail, the license and server it came from and, if you choose to include it, diagnostic information (CloudZH version, update channel, operating system and installed apps). We store the message in the license service and forward it to a private channel on Discord (Discord Inc., USA) so that we can review it. Please do not include personal data of other people in your feedback.
4. Purposes and Legal Bases
We process personal data to:
- provide and bill your license (performance of a contract, Art. 6(1)(b) GDPR);
- comply with legal obligations such as accounting and tax rules (Art. 6(1)(c) GDPR);
- protect our systems, prevent fraud and license misuse, and improve CloudZH (legitimate interests, Art. 6(1)(f) GDPR);
- answer your requests (performance of a contract or legitimate interests).
5. Service Providers
We share personal data only with the following recipients, who help us sell and run CloudZH:
| Provider | Purpose | Location |
|---|---|---|
| Sold through Link, LLC and Stripe (Stripe, Inc., Stripe Technology Europe, Ltd. and affiliates) | Reseller and merchant of record: checkout, payments, invoices, taxes, transaction support (independent controller) | USA, Ireland |
| BlazingFast, A.S.A.S.S.U. Lda. | Hosting of cloudzh.app and the license service (virtual server) | Company: Macau; server: Netherlands |
| Resend, Inc. | Sending license keys and service emails (no open or click tracking) | Company: USA; sending region: Ireland (EU) |
| Brevo (Sendinblue SAS) | Backup route for sending license keys and service emails | France (EU) |
| Cloudflare, Inc. | DNS and forwarding of emails sent to support@cloudzh.app | USA |
| Hostpoint AG | Mailbox for support emails | Switzerland |
| Discord Inc. | Receiving feedback sent from the dashboard | USA |
We do not sell personal data.
6. Transfers Abroad
Some service providers process data outside Switzerland and the EU/EEA, in particular in the USA. We rely on adequacy decisions, such as the Swiss-U.S. and EU-U.S. Data Privacy Framework where the provider is certified, or on standard contractual clauses.
7. Retention
- Accounting and billing records: 10 years, as required by Swiss law.
- License data: for the duration of your subscription and up to 12 months afterwards.
- Support correspondence: up to 2 years after the request is closed.
- Feedback messages: up to 2 years after receipt.
- Security and audit logs of the license service (including IP addresses): up to 12 months.
- Backups of the license database: overwritten on a rolling basis within 7 days.
- Website: no access logs; technical error logs are rotated automatically.
8. Security
We protect personal data with appropriate technical and organisational measures. License keys are stored only as hashes, and license files are cryptographically signed.
9. Your Rights
Subject to applicable law, you have the right to access, rectify and delete your personal data, to restrict or object to its processing, and to receive your data in a portable format. To exercise your rights, contact support@cloudzh.app. We respond within 30 days and may ask you to verify your identity. Your license data is required to provide and verify your license; without it, CloudZH cannot be activated.
You may also lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC) or, if you are located in the EU/EEA, with your local data protection authority. If you are located in the United Kingdom, you may also complain to the Information Commissioner's Office (ICO).
10. Changes
We may update this Privacy Policy. The current version is always available at cloudzh.app/privacy.