Privacy Policy
Last updated: 7 September 2026
1. Data controller
Stage-List (stage-list.com) is operated by a sole trader established in Switzerland. Full contact details are set out in the legal notice. For any question relating to your data: contact@stage-list.com.
2. Data we collect
When you enter your email address or purchase access: your email address, the language and country selected, the amount and date of the purchase, the Stripe payment identifier and the invoice number. We neither receive nor store your bank details, which are processed directly by Stripe.
When you browse the site: your IP address, your browser and device type, the pages viewed and their timestamps, the landing page and the referring site.
When you arrive from an advertisement: the campaign parameters contained in the link (source, campaign, advertisement) and the Meta or Google advertising click identifiers, in order to measure the effectiveness of our campaigns.
When you use your customer area: the contacts you view and their timestamps. These logs are used to protect the database against automated extraction.
When you write to us: the content of your messages and your contact details.
3. Purposes and legal bases
- Providing the service purchased, sending login links and invoices: performance of the contract.
- Responding to your requests: performance of the contract and legitimate interest.
- Reminding you of an unfinished purchase and informing you about the service, by email, with an unsubscribe link in every message: legitimate interest, until you object.
- Measuring site traffic and the effectiveness of our advertising: legitimate interest for aggregated statistics, consent for advertising cookies where the law requires it.
- Preventing mass extraction of the database and securing the service: legitimate interest.
- Keeping our accounts: legal obligation.
4. Cookies and similar technologies
| Name | Issuer | Purpose | Duration |
|---|---|---|---|
| session | Stage-List | Keeping you logged in (strictly necessary) | session |
| _fbp, _fbc | Meta | Advertising measurement and optimisation | 90 days |
| _ga, _ga_* | Audience statistics and Google Ads measurement | 2 years | |
| ph_* | PostHog | Usage statistics and session recording | 1 year |
The measurement tools are loaded when you visit. You can block them through your browser settings or a blocking extension; the site remains usable.
Session recording. We use PostHog, hosted in the European Union, to understand how the site is used. Browsing sessions may be recorded. Input fields are masked and IP addresses anonymised. These recordings are kept for no more than 90 days.
5. Recipients
Your data is processed by the data processors necessary for the operation of the service: website hosting in Germany, payment and invoicing (Stripe), email sending, audience and advertising measurement (Meta, Google, PostHog), as well as our internal support management and activity monitoring tools. Some of these processors are established in the United States; transfers are based on the standard contractual clauses or on the EU-US Data Privacy Framework. We do not sell your data.
6. Retention periods
- Account data: for as long as the account is active, then erased within 30 days of a deletion request.
- Invoices and payment data: 10 years, Swiss accounting obligation.
- Browsing and access logs: kept for as long as necessary for the security of the service and to prevent automated extraction of the database.
- Database backups: 14 days on a rolling basis.
- Reminder emails: stopped immediately upon unsubscribing, the address then being kept on an exclusion list.
7. Your rights
You may request access to your data, its rectification, its erasure, its portability, or object to processing based on legitimate interest, by writing to contact@stage-list.com. We respond within 30 days. You may refer the matter to the Federal Data Protection and Information Commissioner in Switzerland or, in the European Union, to your national authority, for example the CNIL in France.
8. Security
Encrypted connection, authentication by login link without a password, restricted and logged server access, automatic limitation of abnormal consultations.
9. Governing law
Swiss Federal Act on Data Protection. For persons located in the European Union and the United Kingdom, the GDPR and the UK GDPR also apply.