Privacy

Operator

Regalzeile is a service of Ehrenreich AG, Universitätstrasse 69B, 8006 Zürich, UID CHE-356.149.070. Nicolai Ehrenreich is responsible. Questions about data protection go to mail@regalzeile.ch. The full details are in the legal notice, the contract terms in the terms.

Purpose

Regalzeile manages private media collections: books, records, films and games, together with shelves, rooms and loans. The data is used for this purpose only. There is no advertising, no disclosure to third parties and no analysis across libraries.

What data

• Account: e-mail address, name (optional), password only as a hash or sign-in with Google or Apple, and the time you agreed. With two-factor sign-in enabled, the authenticator secret encrypted and the recovery codes only as hashes.
• Library: titles, copies, covers, shelves, places, wishlist, loans with the borrowers’ names, backups.
• Invitation requests: name, e-mail address, optional message and IP address (only to prevent mass requests). A nightly clean-up deletes the IP address once it is older than 24 hours, and completed requests 90 days after the decision.
• Requests from organisations: organisation, name, role, e-mail address, telephone, details about the collection, message, language and IP address (only to prevent mass requests, deleted after 24 hours). We delete rejected requests one year after the decision.
• Registration attempts: e-mail address and IP address of every registration attempt, used only for the block against mass registrations. A nightly clean-up deletes these entries once they are older than 24 hours.
• Shared links: for shared links we count views without storing an IP address or a time. Visitors to a shared link need no account and leave no personal data; against mass requests, a limit per IP address applies, which is kept in memory only and for one minute only.
• Technical: server logs with IP address and time for operation, not for analysis.

Guide e-mails

After you register, you receive a welcome e-mail and then, for eight weeks, one e-mail a week with a guide article about Regalzeile. The basis is the existing user relationship (Art. 3 para. 1 lit. o of the Swiss Unfair Competition Act (UCA)); every e-mail contains an unsubscribe link, and you can turn the e-mails off in Settings. Only the progress of the series and the time of an unsubscribe are stored for this. There is no open or click tracking.

External services

To look up metadata and covers, Regalzeile queries Google Books, Open Library, the German National Library, ISBNdb, MusicBrainz and Discogs. Only the ISBN, barcode or title is sent, never account data. E-mails (invitations, password reset, reminders, guide e-mails) are sent by Resend. Signing in with Google or Apple is optional; Regalzeile receives only your e-mail address and name in that case.

The wishlist and the item page show purchase links to Amazon.de. These are affiliate links: as an Amazon Associate I earn from qualifying purchases; the price does not change for you. Before you click, no data flows to Amazon; after the click, Amazon’s terms apply, and Amazon can tell from the link that the visit comes from Regalzeile. If you paste a short Amazon link, the Regalzeile server resolves it — only Amazon sees a request from the server, not from your browser.

How many people visit Regalzeile and which pages they open is counted by Plausible Analytics (Plausible Insights OÜ, Estonia, servers in the EU). Plausible sets no cookies, stores no IP address and builds no profile; it records page, referrer, country, browser and device type without linking them to a person. That is why no consent banner is needed.

Hosting

The application, database and images run on Microsoft Azure in the Switzerland region. Backups of the libraries are stored there in the same storage.

Who sees what

The contents of a library are seen only by its members, depending on their role (owner, member, reader). The administration view shows the operator only figures and status of the libraries (number of titles, storage, plan), no contents. The operator has technical access to the database and the backups for operation and recovery; the operator does not use it to look at contents.

Cookies

Regalzeile sets cookies only for sign-in, the active library and the chosen language (NEXT_LOCALE, valid for one year, not linked to a person). No ad trackers, no analytics cookies — the visitor statistics with Plausible work without cookies.

Deletion

Account and library are deleted on request — a message to mail@regalzeile.ch is enough. A deletion function with a 30-day period in the settings will follow. Backups of a deleted library are removed with it.