# PremiMatch privacy notice > What data PremiMatch processes, why, with which providers (Cloudflare, Stripe, Pingen, Swiss Post, Resend) and for how long: the comparison sends nothing, the postal service encrypts and deletes. https://premimatch.ch/en/privacy/ · 2026-10-02 · 2026-09-29 (OFSP/BAG) · https://premimatch.ch/en/privacy.md Privacy notice # Privacy notice Comparing asks for no personal data and sends nothing. The postal service, though, needs the information in your letter: here is what we do with it, with whom, and for how long. ## Controller **Sébastien Trosset** Case postale 584 1918 La Tzoumaz E-mail: [service@premimatch.ch](mailto:service@premimatch.ch) This notice follows the Federal Act on Data Protection (FADP). It was last updated on 2 October 2026. ## In brief - **The comparison** works without an account, a name or an e-mail. Your answers stay in your browser and are not sent to a server. - **The postal service** (optional, paid) processes the information in your letter, encrypted, for as long as it takes to print it and send you the confirmation, then deletes it. - **Payment** is made at Stripe; your card or TWINT details never pass through PremiMatch. - **Visit statistics** (Google Analytics) are measured only if you accept them. - No personalised ads, no sale of data, no profiling. ## What your browser keeps So that you can find your results and settings again, the site stores in your browser's local storage (not cookies, and nothing is sent): your language, the display mode, the text size, your answers to the questions (postcode, age group, accident cover, health or medical costs, current insurer and model, accepted models), your latest results, the information entered for the letter, the reference of your last order and your choice about statistics. You can erase everything by clearing the site's data in your browser. ## What the server sees Like any site, PremiMatch receives with each page the technical data of the request: IP address, browser type, page requested, time. This data is used to deliver the pages and to protect the site against abuse. Cloudflare, which hosts the site, keeps it in its logs for a short time under its own terms; PremiMatch reads only aggregated statistics from it (number of requests by country and by page) and identifies no one. ## The postal service **Data processed**: name, address, date of birth, insured number (Versichertennummer / numéro d'assuré), current insurer, language of the letter, where relevant the name, date of birth and insured number of other family members, the signature or signatures drawn on screen, your e-mail address, the sending option chosen and, after payment, the payment method (TWINT, card, Apple Pay, Google Pay), Stripe's receipt number and the time. **Purpose**: to produce and post your letter, collect the payment, confirm your order and keep you informed of its delivery, handle a complaint or a refund, keep the accounts. Basis: the fulfilment of your order ([terms of sale](https://premimatch.ch/en/terms-of-sale/)) and our legal obligations. **Recipients**: - **Stripe** (Stripe Payments Europe, Limited, Dublin, Ireland, with processing by Stripe, Inc., United States): the amount, the order reference and your e-mail address, for the payment and the receipt. Stripe keeps the payment data under its legal obligations. At the time of payment, Stripe's form sets its fraud-prevention cookies (`__stripe_mid`, `__stripe_sid`) on our domain. - **Pingen** (Pingen GmbH, Zurich): the letter as a PDF, with everything it contains, and the sender's and recipient's addresses, for printing and handover to Swiss Post. Pingen keeps the letter under its own terms. - **Swiss Post**: the insurer's address and yours, for delivery and tracking. - **Resend** (Plus Five Five, Inc., United States): your e-mail address and the three order messages. The confirmation message contains a copy of the letter as a PDF, so the same data that Pingen receives. Resend keeps the messages in its logs for 30 days. - **Cloudflare** (Cloudflare, Inc., United States): the service runs on its network and its database, in the Western Europe region. The information in the letter waits there encrypted (AES-GCM) with a key that only the service holds; reading the database shows nothing legible. **Retention**: the information in the letter is deleted as soon as the print shop has received the letter and the confirmation e-mail has gone out, at the latest three days after the order. An unpaid order is erased after 24 hours at the latest. If a paid letter could not be posted, its information is kept for 14 days to try again, then deleted. PremiMatch does not keep your e-mail address: it is read again from Stripe each time a message is sent. What remains afterwards, without name or address, is the order record: reference, sending option, steps and times, tracking number, payment reference, payment method and receipt number, kept for ten years as an accounting record (art. 958f CO). A letter's tracking page shows no name, address or content: only the status of the sending. ## Visit statistics If you accept them, in the banner or under “Statistics settings” at the bottom of the page, the site loads Google Analytics (Google Ireland Limited, Dublin, with processing by Google LLC, United States) and measures: page views, steps of the questions, clicks to the partner, an order of the postal service (never its content). Google's cookies are set only after you agree; the measurement cookie expires after 13 months, the data is kept for 14 months. Never measured: your postcode, your age, your answers about health and medical costs, the content of your letter. You can withdraw your consent at any time in the same place; refusing changes nothing about how you use the site. ## Transfers abroad Stripe, Resend, Cloudflare and Google are American companies or belong to one. For these transfers, PremiMatch relies on the safeguards provided by the FADP: certification under the Swiss-U.S. Data Privacy Framework or the standard contractual clauses recognised by the Federal Data Protection and Information Commissioner (FDPIC). ## Security The site is served over HTTPS only. The information in the letter is encrypted at rest and is readable only by the service at the moment of printing and sending the confirmation. Technical alerts and logs contain no name, address or letter content. ## Your rights You can ask for access to your data, its correction or its deletion, and object to processing (art. 25 ff. FADP), by writing to [service@premimatch.ch](mailto:service@premimatch.ch). The information in a letter is already deleted after it is sent; a letter handed to Swiss Post can no longer be recalled. You can also contact the [FDPIC](https://www.edoeb.admin.ch/). ## Children The service is for adults. A child's data appears in a letter only if a parent enters it there. ## Changes This notice may change with the site. The date of this version is shown at the bottom of the page. Version dated 2 October 2026. Contact : [service@premimatch.ch](mailto:service@premimatch.ch)