Already CH 🇨🇭
Docs Handbook Checklist Calculator
Buy — CHF 199 →
Docs Handbook Checklist Calculator
Buy Already CH — CHF 199 →
Legal  🇨🇭

Privacy Policy

Last updated: 27 May 2026 · wait, what. studio · Zurich, Switzerland

Who we are

Already CH is a software product published by wait, what. studio, based in Zurich, Switzerland. The data controller within the meaning of Art. 5 lit. j of the revised Swiss Federal Act on Data Protection (nFADP) is wait, what. studio.

Contact for all data-protection matters: already-ch@wait-what.shop

This notice is provided in accordance with the information obligation under Art. 19 nFADP and explains what personal data we collect when you purchase or use Already CH, how it is processed, where it lives, and which rights you have.

Where your data lives

Already CH is designed to keep data inside Switzerland and the European Union by default. We do not rely on US cloud services for any operational function of this product.

  • Hosting and database: Exoscale data centres in Switzerland (Geneva, Zurich).
  • Transactional email: Infomaniak SMTP — Swiss, ISO 27001 certified.
  • Analytics: Self-hosted Matomo running in cookie-free mode on Exoscale.
  • Error tracking: Self-hosted GlitchTip on Exoscale.
  • Bot protection: Friendly Captcha — German, privacy-first, no US surveillance stack.

No US sub-processors are used in the default deployment of Already CH.

What data is collected

We collect the minimum data necessary to deliver the product and respond to support requests.

  • Email address — provided at checkout. Used to deliver your GitHub repository invite and to respond to support enquiries.
  • GitHub username — provided when you accept the repository invite. Used to grant access to the private template repository.
  • Purchase record — transaction ID, amount, currency, date, and licence tier. Held in our self-hosted Supabase instance on Exoscale.
  • Aggregate site analytics — Matomo runs in cookie-free mode: page URL, referrer, screen size, anonymised IP (last octet truncated), and a daily-rotating fingerprint that cannot be cross-referenced with personal data. No consent banner is required because no personal data is stored in cookies or local storage.

Payment data

Payments are processed by Payrexx AG, a Swiss payment gateway headquartered in Thun, Canton of Bern. Payrexx is regulated under Swiss law and is a member of the Self-Regulatory Organisation VQF (SRO-VQF) for anti-money-laundering supervision.

Payrexx handles credit card data, TWINT transactions, PostFinance payments, VAT calculation, and tax records. We receive only a summary of completed purchases (transaction ID, amount, plan tier, email). Card details are never seen, stored, or processed by us. Payrexx's privacy notice applies to payment processing: payrexx.com/en/site/data-protection.

Repository access

Already CH is delivered as a private GitHub repository. When you accept the repository invite, GitHub Inc. processes your GitHub account data. GitHub is a US-based sub-processor and is the only US data touchpoint in the purchase flow — it is unavoidable because the product is shipped as source code via GitHub. GitHub's privacy notice applies: GitHub privacy statement.

If GitHub access is unacceptable to you for compliance reasons, contact us at already-ch@wait-what.shop — we can deliver a one-time tarball download from Swiss-hosted storage instead.

How data is used

  • To fulfil your purchase (send the GitHub repository invite)
  • To respond to support requests you initiate
  • To send important product updates, such as security fixes — no marketing emails
  • To produce aggregate usage statistics for this website (cookie-free, anonymous)

We do not sell, rent, or share your data with third parties for marketing purposes. We do not run advertising networks. We do not place tracking cookies.

Legal basis (nFADP and GDPR)

Where the nFADP requires a legal basis under Art. 31 ff., processing is justified by (a) performance of the purchase contract, (b) our legitimate interest in operating and securing the service, or (c) your consent where it has been explicitly given. Where the GDPR applies (EEA/UK customers), the equivalent Art. 6(1) lit. b, lit. f, or lit. a applies respectively.

Data retention

Purchase records are retained for ten years as required by Swiss commercial law (Art. 958f of the Swiss Code of Obligations). Support email threads are retained until the matter is resolved, then deleted within 30 days. If you request deletion and have no active licence or open legal obligation, your personal data will be removed within 30 days.

Your rights under nFADP

As a data subject, you have the following rights under the revised Swiss Federal Act on Data Protection:

  • Art. 25 — Right to information: request a copy of all personal data we hold about you
  • Art. 32 — Right to rectification: request correction of inaccurate personal data
  • Art. 32 — Right to erasure: request deletion of your personal data (subject to legal retention obligations)
  • Art. 28 — Right to data portability: receive your personal data in a structured, commonly used, machine-readable format
  • Art. 30 — Right to object: object to processing based on legitimate interest
  • Right to lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC / EDÖB) at edoeb.admin.ch

To exercise any of these rights, email already-ch@wait-what.shop with the subject line "nFADP request". We respond within 30 days as required by Art. 25 para. 6 nFADP.

Cookies

This website sets no first-party tracking cookies. Matomo runs in cookie-free mode. A single technical cookie (al-th) stores your dark-mode preference locally — it contains no personal data and is not sent to any server. Payrexx may set cookies during the checkout flow; those are governed by Payrexx's own policy.

International data transfers

The default deployment of Already CH does not transfer personal data outside Switzerland or the EU. The only exception is the GitHub-based delivery flow, which involves a transfer to the United States. We rely on GitHub's Standard Contractual Clauses and adequacy mechanisms recognised by the Federal Council under Art. 16 nFADP.

Changes to this policy

We may update this policy to reflect changes in our processing activities or applicable law. The "Last updated" date at the top reflects any revisions. Material changes will be communicated to active licence holders by email.

Contact

Questions, requests, or complaints: already-ch@wait-what.shop

Postal address: wait, what. studio · Zurich, Switzerland

Already CH

Swiss-sovereign Next.js SaaS starter. 16 modules. Data stays in Switzerland. Buy once, own the code.

🇨🇭 Hosted in Switzerland Next.js 15 Supabase Payrexx Exoscale Matomo nFADP
Product
Docs Handbook Checklist Calculator
Compare
vs already (US) vs ShipFast vs Supastarter vs Makerkit vs Next.js SaaS Starter
Migrate
From Lovable From Base44 From Bolt From v0
Legal
Privacy Policy Terms of Service
Contact
Support
wait, what. · 2026 · Made in Switzerland 🇨🇭 Sold via Polar.sh · Merchant of Record · global tax handled