Privacy

Privacy

This page describes the site as it currently operates. It is not legal advice and will be reviewed before launch.

Data controller

Data controller: Go Helvetia LLC. Privacy contact: hello@nerovelle.com. Registered address and jurisdiction to be confirmed and published before launch.

Accounts and cookies

You do not need an account to use the guide. Optional first-party analytics starts only after you choose “Allow analytics”. Declining does not restrict the site. Use “Analytics preferences” at the bottom of any page to change your choice. We respect Do Not Track and Global Privacy Control signals.

Your preference is kept in this browser for up to 180 days. If you allow analytics, a random browser identifier is kept for up to 90 days, and a random tab-session identifier expires after 30 minutes of inactivity. These are not linked to your name, email or Google account. Revoking permission clears these identifiers from this browser and stops new optional events; previously collected records expire under the retention periods below.

Hosting and server logs

The site is hosted on Cloudflare. Cloudflare processes standard request data such as IP address, requested URL and browser details to deliver the site, and keeps operational logs under its own retention settings.

Third-party content

Some pages load content directly from third parties, which receive your IP address and browser details when the page loads:

  • Google Fonts (fonts.googleapis.com, fonts.gstatic.com) for typefaces.
  • OpenStreetMap (tile.openstreetmap.org) powers every embedded map on the site, with the Leaflet library (unpkg.com) that renders it. OSM's own policies apply to tile requests. Directions links open Google Maps in a new page when you choose them.
  • Unsplash (images.unsplash.com) for photographs.
  • Tiqets (tiqets.com) — links to the Tiqets booking site open a third-party page governed by Tiqets' own privacy policy.

Outbound links

Ticket links go to the official sellers' and partners' websites. Those sites have their own privacy policies. Visiting them is outside this site.

Click records

With permission, first-party analytics records page visits, outward link clicks, approximate reading time and scroll depth. Records include hashed random browser/session identifiers, page path, referral source, campaign tags, coarse country/device category and the destination hostname/path. Query strings and fragments are removed from destinations. Raw IP addresses and raw user-agent strings are not stored in these growth records.

Separately, aggregate operational page-request counts are recorded without browser identifiers or cookies, grouped by day, public page, referral category, country, device category and recognised-bot status. These counts are not a count of unique people. Cloudflare supplies country information and handles hosting requests as described above. A daily hash is used transiently for event rate limiting.

The owner workspace uses Google sign-in, restricted to the single authorised owner. It stores the owner's verified Google subject and email plus expiring sessions. Sign-in cookies are necessary for private access, expire after 12 hours, and are cleared on sign-out. Google credentials and tokens are not included in visitor analytics.

Retention

Optional growth events and owner audit events are retained for up to 90 days; aggregate page-request counts for up to 365 days. Expired owner sessions and OAuth sign-in state are removed by daily maintenance. Cloudflare hosting-log retention and the legacy click API/Supabase records remain subject to the operator's separate retention settings and pre-launch review.

Your contact and rights

The data controller's identity and privacy contact details are: Go Helvetia LLC, hello@nerovelle.com. Registered address and jurisdiction to be confirmed and published before launch.

Items for legal review before launch: lawful basis and consent requirements for the Google Maps and Google Fonts embeds under EU rules; data processing terms with third-party providers; the retention periods above; and the data controller identity.