Last updated: 24 October 2026
This privacy policy explains which personal data is processed when you visit romanoroth.com, for what purpose, and what rights you have. It is based on the Swiss Federal Act on Data Protection (revFADP/revDSG) and, where applicable, the EU General Data Protection Regulation (GDPR).
Controller#
Romano Roth
Zürcherstrasse 39J, 8952 Schlieren, Switzerland
Email: romano.roth@gmx.ch
Hosting and server logs#
This site is hosted on Cloudflare Pages, operated by Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. To deliver and protect the pages, Cloudflare processes the data every request carries: IP address, date and time, requested page, referring page and browser user agent. Cloudflare keeps these logs for a limited time to operate the service and defend against attacks.
Legal basis: legitimate interest in a secure, working website (Art. 6(1)(f) GDPR; Art. 31 revFADP). Cloudflare acts as a processor. Data may be transferred to the USA; such transfers are covered by the EU standard contractual clauses (with the Swiss addendum) and Cloudflare’s certification under the EU-US / Swiss-US Data Privacy Framework. Cloudflare’s privacy policy: cloudflare.com/privacypolicy.
Cookies and Google Ads#
This site uses Google Ads (tag ID AW-992417191) from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (parent company Google LLC, USA) to measure whether our advertising works, for example when you click through to a book shop, the newsletter or a podcast platform (conversion tracking).
Only with your consent. When you first visit, a banner asks for your consent. Until you click “Accept”, Google Consent Mode v2 keeps all storage set to “denied”: no advertising or analytics cookies are set and nothing is stored on your device. Only after you accept are cookies such as _gcl_au (Google Ads conversion linker, up to 90 days) and Google cookies on google.com/doubleclick.net (e.g. IDE, test_cookie) set.
Without consent (cookieless pings). Even if you decline, the Google tag sends cookieless signals to Google (e.g. that a page was viewed or a link was clicked, consent status, timestamp, browser and page information, IP address for transmission). These contain no cookie identifiers and are used by Google only in aggregated form for modelling conversions. Advertising identifiers are redacted.
Your choice is stored in your browser’s local storage (cookie_consent) so the banner does not reappear. You can change or withdraw your consent at any time via the “Cookie settings” link in the footer; withdrawal does not affect processing carried out before.
Legal basis: your consent (Art. 6(1)(a) GDPR; Art. 6(6) and 31 revFADP; for storage on your device Art. 5(3) ePrivacy Directive / § 25 TTDSG). Google may process data in the USA; Google LLC is certified under the EU-US / Swiss-US Data Privacy Framework and uses standard contractual clauses. More information: policies.google.com/privacy and business.safety.google/privacy.
Embedded content#
Some pages embed YouTube videos in privacy-enhanced mode via youtube-nocookie.com (Google Ireland Limited / Google LLC). When such a page loads, your browser connects to youtube-nocookie.com, which receives your IP address and the page URL but sets no tracking cookies until you start playback. Starting playback is your decision and connects you to YouTube, which may then set cookies.
Spotify players (Spotify AB, Regeringsgatan 19, 111 53 Stockholm, Sweden) are embedded on podcast and music pages. Loading them connects your browser to Spotify, which receives your IP address and may set cookies.
Audioboom players (Audioboom Ltd., London, UK) are embedded on some podcast pages. Loading them connects your browser to Audioboom, which receives your IP address.
The newsletter sign-up form is embedded from Substack (Substack Inc., San Francisco, USA). Loading it connects your browser to Substack.
Legal basis: legitimate interest in presenting our videos, podcasts and newsletter (Art. 6(1)(f) GDPR; Art. 31 revFADP). These providers may process data in the USA; see their privacy policies.
Fonts and assets#
Fonts, images, stylesheets and scripts are served from this site’s own domain. No request goes to Google Fonts or another font CDN.
Links to other sites and newsletter#
This site links to book shops (Leanpub, Amazon), podcast platforms, social networks and other sites. Once you follow a link, that site’s privacy policy applies. Clicks on shop, newsletter and podcast links are measured as described under Google Ads.
The newsletter runs on Substack (Substack Inc., USA). If you subscribe, Substack processes your email address and usage data under its own privacy policy (substack.com/privacy); we receive your email address as subscriber of the publication.
Your rights#
Within the limits of applicable law you have the right to access your personal data, to have it corrected or deleted, to restrict or object to its processing, to data portability, and to withdraw consent at any time with effect for the future. Contact us at the address above. In practice we do not hold data that identifies you; server logs are held by Cloudflare and advertising data by Google.
You may lodge a complaint with a supervisory authority: in Switzerland the Federal Data Protection and Information Commissioner (FDPIC, edoeb.admin.ch), in the EU the authority of your country of residence.
Changes#
We update this policy when the site changes. The current version is published here.