Privacy policy

1. Controller

Kiye Mateus, chemin de Vers 9, 1228 Plan-les-Ouates, Switzerland. Email: mateus@kiye-mateus.com. Phone: +41 76 548 69 65.

This policy covers kiye-mateus.com and the sale of the documents offered there. It follows the Swiss Federal Act on Data Protection (FADP) and, for data subjects in the European Union, the General Data Protection Regulation (GDPR).

2. Visiting the website

To display pages, your browser exchanges technical data with the host: IP address, date and time, requested page, browser, operating system, referrer and response code. These logs are used to deliver the website, diagnose errors and protect the infrastructure against abuse. They are kept by the host according to its own retention periods.

The website measures its audience with Plausible Analytics, a tool built without cookies: it stores nothing and reads nothing on your device to recognise you. To count unique visitors within a day, Plausible computes a fingerprint from the IP address, the browser and a salt that is renewed and deleted every day; the IP address is never stored and the fingerprint cannot follow you from one day to the next or from one site to another.

What is measured: the page viewed, the referring site and campaign parameters (utm), device type, browser, operating system, country and region, and the purchase steps (product page viewed, offer and language chosen, added to cart, leaving for payment, purchase confirmed with its amount). Data is sent through kiye-mateus.com/stats, with no third-party script. These statistics are used only to improve the website, solely on behalf of Kiye Mateus; they are never combined with other data or used for advertising.

When you pay, Stripe notifies the website of the payment (offer, language, amount). This signal, verified by its signature, is passed to Plausible without your name or email, to count actual sales. The website uses no advertising pixel and no tracking cookie.

3. Browser local storage

The website stores three preferences in your browser, sent to no server: km-cart (cart content), km-edition (document language) and km-theme (light or dark theme). When you change the website language, an nf_lang cookie remembers that choice for one year so the home page opens in your language; only the host reads it.

On the download page, km-purchases keeps a short, irreversible fingerprint of your payment (twenty at most), so that reloading the page does not count the same sale twice.

These values exist only for your convenience. You can clear them at any time in your browser settings; the website works without them.

4. Purchase and payment

When you buy, you enter your name, email address, country and payment details on Stripe’s payment page. Stripe also processes technical information (device, IP address) to prevent fraud.

Kiye Mateus receives from Stripe your name, email, country, the product bought, the amount, the date and the type or last four digits of the payment method. He never has access to your full card number.

This data is used to fulfil the order, give you access to the files, send the receipt, handle any refund, answer your questions and keep the accounts. It is not used for any marketing email without your consent.

To deliver the files, the website records your name, email, offer, language and number of downloads. Your name and email are printed at the foot of every page of the PDFs you download, to mark your personal copy. The link to your files is emailed to you through Resend.

5. Email and phone

If you write or call, the information you share is used to answer you and follow up on your request.

6. Recipients and providers

Netlify, Inc. (United States): website hosting and delivery. Stripe Payments Europe Ltd (Ireland) and Stripe, Inc. (United States): payment processing, receipts and fraud prevention. Google LLC (Gmail): receiving and managing emails addressed to Kiye Mateus. Plausible Insights OÜ (Estonia): audience measurement, data hosted in the European Union. Resend, Inc. (United States): sending the delivery email, from its servers in Ireland.

These providers act to deliver the service or as controllers of their own processing under their own policies. Your data is never sold or rented. It may be disclosed to authorities where the law requires.

7. International transfers

Some providers process data outside Switzerland, in particular in the European Union (Ireland) and the United States. These transfers rely on an adequacy decision recognised by the Swiss Federal Council or the European Commission, including the Swiss–US and EU–US Data Privacy Frameworks for certified companies, or on standard contractual clauses.

8. Legal bases

Processing is based on performance of the contract and pre-contractual steps (GDPR Art. 6(1)(b)), on legal obligations such as bookkeeping (Art. 6(1)(c)), and on the legitimate interest in operating and securing the website, preventing fraud and measuring its audience anonymously (Art. 6(1)(f)). Under Swiss law, it complies with the principles of Art. 6 FADP.

9. Retention

Accounting records of sales (amount, date, product, buyer identity) are kept for ten years under Art. 958f of the Swiss Code of Obligations. Delivery data (name, email, offer, number of downloads) is deleted automatically one year after purchase. Emails are kept while your request is handled and then as long as they are needed to prove an order or refund. Browser preferences remain until you clear them; the nf_lang cookie expires after one year. Plausible statistics are aggregated and contain no data that identifies you.

10. Your rights

You can request access to your data, correction, deletion within the limits of legal obligations, restriction of processing, a copy in a common format, and object to certain processing. Write to mateus@kiye-mateus.com; you will receive an answer within 30 days.

You may also contact the Federal Data Protection and Information Commissioner (FDPIC, Bern) or, if you live in the European Union, the supervisory authority of your country.

11. Security and updates

The website is served over HTTPS only and payments go through Stripe, which is PCI DSS certified. No system offers absolute security; in the event of an incident, legal obligations are met.

This policy is updated when the website’s operation, providers or purposes change. The date of the latest version appears at the top of the page.

Contact