Privacy policy

Last updated: 10.09.2026

This policy describes the personal data we process when you visit this site or use our services, why we do so, and the rights available to you. It applies under the Swiss Federal Act on Data Protection (FADP) and, where you reside in the European Union, the General Data Protection Regulation (GDPR).

Controller

James Benone, Unrecon, a sole proprietorship, Rue Hoffmann 8, 1202 Geneva, Switzerland.

For any question relating to data protection: customer-service@unrecon.ch.

Data we process

Site visits: web server technical logs containing the IP address, the date and time of the request, the page requested, the response code, the referrer and the user agent.

Getting in touch: the data you send us on your own initiative by email, namely your name, your email address and the content of your message.

Client area and billing: identity, contact details, login data, order history and invoicing records.

We do not process sensitive data within the meaning of art. 5 let. c FADP in the operation of this site.

Purposes and legal bases

Providing and securing the site and the services, preventing and analysing abuse and attacks: legitimate interest in ensuring the availability and integrity of the infrastructure (art. 31 FADP; art. 6(1)(f) GDPR).

Answering your requests and delivering the services: pre-contractual measures or performance of the contract (art. 31(2)(a) FADP; art. 6(1)(b) GDPR).

Complying with our legal obligations, in particular accounting obligations and, where applicable, those arising from the SPTA (art. 31(1) FADP; art. 6(1)(c) GDPR).

Usage analysis and improvement of our services, based on technical logs and without individual profiling: legitimate interest in developing an offering that matches observed needs (art. 31 FADP; art. 6(1)(f) GDPR).

Cookies and local storage

This site sets no cookies and uses no audience measurement, profiling or advertising tool.

A single item is saved in your browser's local storage, under the key “unrecon-theme”, to remember your choice of light or dark theme. It is transmitted to no one and you can clear it from your browser settings.

The technical data we keep is limited to what the law requires us to retain and to what lets us analyse and improve our services. It is hosted in Geneva, used by our teams alone, and is not sold, rented, transferred or passed to any third-party company.

No external resource is loaded when this site is displayed: fonts, stylesheets, images and scripts are all served from our own servers. Viewing this page therefore opens no connection to any third-party company.

Recipients and processors

We do not sell, rent or transfer your data. We entrust it to no third-party company for commercial, advertising or audience measurement purposes.

We use two processors. Artaun Hosting, a declared association under French law (SIREN 104 908 496, RNA W523005685), 1 rue des Aziaux, 52410 Eurville-Bienville, France, operates the IP tunnel through which all traffic bound for our services enters. Artaun Hosting itself relies on Qoriz Hosting, at the Equinix PA5 data centre in Aubervilliers, without our having any direct contractual relationship with the latter.

Contabo GmbH, Welfenstraße 22, 81541 Munich, Germany, rents us the virtual private server running our GitLab instance. The machine is operated in Lauterbourg, France, by Contabo France SAS, 2 rue Taunus, 67630 Lauterbourg. The instance holds only source code and our staff accounts: no client account, no operational data, no backup, no billing data. As the operator of the hypervisor, Contabo technically has access to that machine, on which no data concerning you resides.

Our payments are collected by Payrexx AG, Burgstrasse 20, 3600 Thun, Switzerland, a regulated financial intermediary, which receives the data needed for the transaction: identity, contact details and payment data. We store neither your card number nor your banking credentials. Payrexx acts as an independent controller for its own legal obligations, in particular anti-money-laundering duties. Payments are processed in Switzerland.

The TLS certificate is installed on our Geneva server: traffic stays encrypted from the browser to our machines. Artaun routes packets whose IP addresses, ports and volume it can see, never their content. The link between the tunnel and Geneva is itself encrypted with WireGuard, and none of our processors holds a key that would decrypt that traffic.

Apart from these providers, your data is disclosed to a third party only where the law or a decision by a competent authority requires it, and only to the extent required.

Transfers abroad

All of our clients' data — game servers, VPS, websites, client area and billing — is hosted in Geneva and does not leave Swiss territory.

Two exceptions, both in France, and neither carries any data concerning you. The virtual private server holding our internal code repository and our staff accounts is operated in Lauterbourg. Traffic also passes through the anti-DDoS tunnel operated by Artaun. As a member state of the European Union, France is among the states whose legislation ensures adequate protection within the meaning of art. 16 FADP and annex 1 DPO: no additional contractual safeguard is required for these transfers.

Retention periods

Technical logs: 30 days, then anonymised.

Correspondence: 2 years after the last exchange.

Accounting records: 10 years, in accordance with art. 958f CO.

Security

The site and the services are exposed over HTTPS only, the certificate being installed on our Geneva server. Traffic therefore stays encrypted end to end, and the link between the anti-DDoS tunnel and Geneva runs over WireGuard. Access to the infrastructure is restricted to those who need it and is logged.

Data hosted on behalf of our clients

When you host a service containing personal data with us, you remain its controller and we act as processor. We access that data only on your instruction, or insofar as strictly necessary to operate and secure the infrastructure.

Artaun Hosting routes and filters the traffic bound for the services you host with us: it therefore acts as a sub-processor, without access to the content, which stays encrypted all the way to Geneva. Contabo hosts only our code repository and is not in the path of your traffic: no operational data from your services resides there, but the source code kept there may incidentally contain some, which is why our data processing agreement declares it as well.

A data processing agreement compliant with art. 9 FADP and art. 28 GDPR is available on request at customer-service@unrecon.ch.

Your rights

You may request access to your data, its correction, its erasure or the restriction of its processing, object to processing based on our legitimate interest, and request the release or transfer of your data in a common format.

Send your request to customer-service@unrecon.ch. We may ask you to prove your identity before acting on it, and we reply within thirty days.

You have the right to contact the Federal Data Protection and Information Commissioner (FDPIC), in Bern. If you reside in the European Union, you may also lodge a complaint with the supervisory authority of your country of residence.

Changes

This policy may be adapted as our services or the legal framework evolve. The applicable version is the one published on this page, whose update date is shown at the top.