Legal

Privacy Policy

Last updated: 28 October 2026

The short version

Preamble

This privacy policy explains which personal data we process on cheeseme.ch, for what purposes and to what extent. It applies to the website cheeseme.ch in all its language versions (the “website”). This English version is a translation; the German version prevails.

Controller and contact

mykhalchenko.consulting
Untermüli 11
6300 Zug
Switzerland

E-mail for all matters, including data protection: [email protected]

Overview of processing

Types of data

• Usage data (e.g. pages visited, time on page, device type)
• Meta, communication and process data (e.g. IP address, time of access)
• Log data (server log files)
• Contact and content data, only if you send us an e-mail

Data subjects

• Website visitors
• People who contact us

Purposes

• Providing the website and a good user experience
• Security and stability
• Audience measurement and improving the quiz
• Answering enquiries

Legal basis

We process personal data in accordance with the Swiss Federal Act on Data Protection (FADP). We process data in good faith, lawfully and proportionately (Art. 6(1) and (2) FADP) and only for purposes that are recognisable to you (Art. 6(3) FADP).

Where we ask for your consent, for example for analytics cookies, the processing is based on that consent (Art. 6(6) and Art. 31 FADP). Otherwise we rely on our legitimate interest in a secure, stable and user-friendly website. Where the EU General Data Protection Regulation (GDPR) applies, the corresponding bases are Art. 6(1)(a) (consent) and Art. 6(1)(f) GDPR (legitimate interests).

The cheese quiz

The quiz runs entirely in your browser. Your answers are not sent to us or anyone else and are not stored. At the end, your result is calculated locally and you are taken to the page of your matching cheese. The address of that page contains only the name of the cheese, no answers and no personal information.

With your consent, web analytics may record which result page was opened, for example that someone became Emmentaler AOP. This is not linked to you as a person.

The cheese personality portraits are pure entertainment, not a psychological assessment.

Hosting and server logs

The website is delivered via Cloudflare Pages. To deliver content to your browser, Cloudflare processes your IP address. To protect against attacks and keep the service stable, requests are recorded in server log files. These may include the requested address, date and time, amount of data transferred, browser type and version, operating system, referrer and IP address.

• Provider: Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA
• Legal basis: Legitimate interests
• Privacy policy: cloudflare.com/privacypolicy
• Transfers to third countries: Data Privacy Framework (DPF), standard contractual clauses

Cookies and consent

Cookies are small files stored on and read from your device. The quiz itself does not need any cookies. We only set cookies for analytics if you agree in the consent banner on your first visit.

Consent management with Cloudflare Zaraz: The consent banner and the loading of analytics services are managed with Cloudflare Zaraz. Zaraz loads services that require consent only after you agree and stores your choice in a cookie, so you are not asked again on every visit.

Withdrawing consent: You can withdraw your consent at any time by deleting this website’s cookies in your browser. The banner will appear again on your next visit. You can also block cookies in general in your browser settings.

• Provider: Cloudflare, Inc., USA
• Legal basis: Legitimate interests (consent management); consent (analytics cookies)

Web analytics

Web analytics shows us how many people take the quiz, which pages are popular and where we can improve. Data is analysed pseudonymously. We do not collect names or e-mail addresses.

Google Analytics 4

With your consent we use Google Analytics 4. A pseudonymous identifier is stored in a cookie and usage data is sent to Google. Google Analytics 4 does not log or store IP addresses of users in Switzerland and the EU. Without consent, Google Analytics is not loaded.

• Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; parent company Google LLC, USA
• Legal basis: Consent
• Privacy policy: policies.google.com/privacy
• Opt-out: Google Analytics opt-out browser add-on
• Transfers to third countries: Data Privacy Framework (DPF), standard contractual clauses

Matomo

For basic audience measurement we use Matomo. We host Matomo ourselves; analytics data is not shared with third parties. IP addresses are anonymised before storage.

• Legal basis: Legitimate interests
• Website: matomo.org

Contact by e-mail

If you e-mail us, we process your e-mail address, your name (if given) and the content of your message in order to answer you. We use this information only to communicate with you.

• Legal basis: Legitimate interests

Sharing your result

The “Share my cheese” button opens your device’s own share function or copies the link to your clipboard. We do not embed social media plug-ins, and no data is sent to social networks when the page loads. Only when you share the link in an app yourself does that app’s privacy policy apply.

Fonts and external content

All fonts and illustrations are hosted on our own server. We do not load fonts from Google Fonts or other third parties and do not embed maps, videos or other external content.

International data transfers

We only disclose personal data abroad if adequate protection is guaranteed (Art. 16 FADP). For the USA we rely, where applicable, on the Swiss-U.S. Data Privacy Framework (DPF), which the Swiss Federal Council has recognised as adequate, and additionally on standard contractual clauses recognised by the FDPIC.

Retention and deletion

We delete personal data as soon as it is no longer needed for its purpose or you withdraw your consent, unless legal retention obligations apply.

• Quiz answers: not stored.
• Server logs: according to Cloudflare’s practice, usually a few days to a few weeks at most.
• Google Analytics: usage data is deleted after 14 months.
• Matomo: raw data is deleted after 25 months at most; only aggregated statistics remain.
• Consent cookie: until you delete it or change your choice.
• E-mails: until your enquiry has been dealt with, at most as long as required by law.

Security

We take appropriate technical and organisational measures to protect your data. The website is delivered exclusively over encrypted HTTPS (TLS). We collect as little data as possible: the quiz works without an account, without forms and without storing your answers.

Your rights

Under the FADP you have in particular the following rights:

• Access: whether and which personal data we process about you.
• Data portability: receiving your data in a common electronic format.
• Rectification: of incorrect data.
• Objection, erasure and destruction: of your data.
• Withdrawal: of consent given, with effect for the future.

To exercise your rights, write to [email protected]. If you believe we are breaching data protection law, you can file a complaint with the Federal Data Protection and Information Commissioner (FDPIC): edoeb.admin.ch.

Changes

We update this privacy policy whenever changes to our data processing require it. The version published on this page applies.

Definitions

• Personal data: any information relating to an identified or identifiable natural person.
• Processing: any handling of personal data, such as collecting, storing, using, disclosing or deleting it.
• Usage data: information about how you use the website, e.g. page views and time on page.
• Meta, communication and process data: technical information such as IP addresses and timestamps.
• Log data: information about requests to the server, e.g. time, requested address and IP address.
• Audience measurement: analysis of visitor flows, usually pseudonymous.
• Controller: whoever decides on the purpose and means of the processing.