Privacy Policy

The data controller within the meaning of the nFADP and Article 4 GDPR is Weared, an entity established in Switzerland (identity and address: legal notice). For any question, exercise of rights or incident concerning your data: contact@weared.ch. No data protection officer and no representative in Switzerland or in the EU has been designated to date.

Requests are handled within the statutory time limits (30 days under the nFADP, 1 month under the GDPR), in French, German, Italian or English, with no justification required for exercising a right.

We limit collection to what is strictly necessary:

• Registration data: pseudonym, confidential contact address, technical identifiers, technical fingerprint of the browser computed at sign-up (anti-fraud);
• Verification data: for sellers, photos of the identity document and selfies (1 year at most after the decision), data read from the document, biometric face-matching data and the result of the verification; buyers' declaration of majority;
• Transaction data: order history, payment references (Lightning, or Stripe for cards), shipping information — pickup point, or name and postal address for home delivery (always the case for a card payment); for a purchase without an account: e-mail, declaration of majority and delivery address;
• Technical data: connection logs necessary for security;
• Declared Instagram account: if you take part in the social-media offer, the Instagram username you declare is recorded on your account. It links your Weared pseudonym to a real public identity: the declaration is voluntary, and its removal may be requested at any time;
• Screenshots submitted as evidence: those you attach to that same offer (profile, story, share) may show your account, your followers and sometimes private conversations. They are neither published nor served by the site — they are stored outside the public folder and can only be viewed by moderation.
• Conversation content: the messages, photos, voice messages, audio and videos you exchange with another member, paid media included. They are visible only to the two people in the conversation and to moderation; a paid media item is shown in full to the buyer only once their payment is proven. We remove their metadata (location, device, date); a recorded voice remains personal data. The microphone is used only while you record a voice message, with your permission. What you have sent is deleted when your account is closed.

What you entrust to us here — your listings, your preferences, your conversations, your purchases — may reveal elements belonging to your private, intimate sphere. The nFADP (art. 5 let. c) and the special categories of Article 9 GDPR class such information as sensitive data and grant it the highest level of protection. Its processing rests on your explicit consent (nFADP art. 6 para. 7 let. a). We do not ask for it at registration: at that point you have entrusted nothing to us yet, and a mandatory box to get in would not be a choice. We collect it where the processing really begins — at the time of identity verification and when you put a listing online — and we keep its date and the version of the text accepted, so as to know what you said yes to. You withdraw it by deleting your account, at any time, with no need to justify yourself.

We never infer, enrich or share this data for advertising-profiling purposes. It serves solely for the performance of the service and compliance with our legal obligations.

Your data is processed to: carry out the introduction and the transaction; frame the direct payment between members and neutral shipping; verify age and identity; prevent fraud, abuse and trafficking; comply with our Swiss legal obligations.

The legal bases are, as the case may be, performance of the contract, explicit consent for sensitive data, legal obligation and the legitimate interest in the security of the house.

Improving our services. We use pseudonymised verification data (check scores, results, rejection reasons, reading errors) and, for as long as they are kept, verification photos, examined on our own servers and never passed to a third party, to make our verification and fraud-prevention tools more reliable. Facial templates are never used for this. Legal basis: our legitimate interest in reliable checks. You can object at any time: contact@weared.ch.

By design, members know one another only by pseudonym. Shipping to a PickPost pickup point or My Post 24 locker (in Switzerland, when paying in bitcoin) and the systematic use of pseudonyms mean that neither the seller nor the buyer accesses the other's details; with home delivery — always the case for a card payment — the seller receives the name and address provided for shipping. Weared stands as a discreet curtain between the parties.

Members directory. Pro and Max members can browse a list of members on the other side (sellers see buyers, buyers see sellers) in order to start a conversation on the platform. This list only shows the username, avatar, country, badges (verified identity, subscription tier), the number of completed purchases or sales, the number of listings online and an indication of recent activity — never an e-mail address, postal address or history. Any member can leave the directory at any time in their settings: they no longer appear in it and nobody can open a conversation with them from the directory.

Your data is shared only with the providers that are strictly necessary. We name all of them, with their role and country:

• Didit (Didit Protocol, Spain — EU): identity and age verification of sellers, as a fallback only, when our own verification process is unavailable.
• Infomaniak (Switzerland): mail hosting and delivery of the e-mails we send you or that you send us.
• Cloudflare, Inc. (United States): site protection and delivery. All traffic passes through this provider, which therefore sees IP addresses and the data submitted through forms.
• Swiss Post: neutral parcel delivery.
• Stripe (Stripe Payments Europe Ltd, Ireland — Stripe, Inc. group, United States): card payments, subscriptions and billing. If you pay by card, the payment page is hosted by Stripe: your card number never passes through our servers and we never see it. Stripe receives your e-mail address, your IP address, your country and your payment method details; for an order, it also collects the delivery name and address, which it passes to us for the seller; otherwise, it returns to us only your customer record identifier, the subscription status, its next renewal date, the card brand and its last four digits.
• Stripe Connect (same company): payouts to sellers who request them, in their own currency. If you sell and choose to be paid to a bank account, Stripe opens a payout account in your name and asks you, on its own pages, for the information it must verify as a financial institution: first name, surname, date of birth, address, phone number, identity document and bank details (IBAN or local account number). Weared passes on only your pseudonym, your e-mail address, your country and your shop address; it never sees any of that information and does not store it. In return it receives only your payout account identifier, its verification status and, where applicable, the reason for a refusal. Staying paid in bitcoin involves none of this data.
• DeepL SE (Germany): automatic translation of listing texts and seller introductions into the visitor's language; depending on the plan subscribed, DeepL may retain these texts. DeepL receives private messages only with a DeepL Pro plan.
• Microsoft (Azure AI Translator; processing in Switzerland, failing that in the EU): without a DeepL Pro plan, translation of private messages into the reader's language when it differs from the author's, with no retention of the text. With neither, messages are not translated. A message is sent as stored; Weared keeps the translation so as not to send it again.
• GitHub, Inc. (United States): storage of an encrypted backup copy of the database and uploaded files.

Crypto payments, for their part, involve no third-party provider. Every processor is bound by confidentiality and security commitments.

If you pay with Apple Pay or Google Pay, the wallet provider takes part in the transaction under its own terms; we receive no data from it. The card itself runs on the Visa or Mastercard network, which sees the transaction as it would any other purchase.

Hosting and processing take place in Switzerland, on infrastructure operated by the site operator. Sellers' identity verification is done there by Weared itself, without any provider: the photos of the identity document and the selfies are sent to our server, stored encrypted in Switzerland, and passed to no third party. Like all of the site's traffic, they transit through Cloudflare, which does not keep them. If this process is unavailable, verification may be done in the European Union by Didit (certified ISO/IEC 27001:2022 and SOC 2, under a data processing agreement): since Switzerland recognises the EEA as providing adequate protection, no additional safeguard is required. Details: Didit's privacy notice. In that case, Weared receives no copy of the identity document, no photo, no video, and no name or address.

Cloudflare and GitHub may process data outside Switzerland and the EU. Those transfers rely on the standard contractual clauses recognised by the Federal Data Protection Commissioner (art. 16 and 17 revFADP).

Embedded third-party content. On an order's payment page, a widget from the exchange Mt Pelerin (Switzerland) is displayed in an embedded frame, so you can buy bitcoin without leaving the site. It is not a processor: if you use it, you deal directly with Mt Pelerin under its own terms. That frame is loaded only if you click the “Buy sats in CHF” button; that click then sends your IP address to that company, before you interact with the widget at all.

No data is sold to third parties. Disclosure occurs only under a legal obligation issued by a competent Swiss authority.

We apply the following periods:

• Photos of the identity document and verification selfies: kept encrypted on our server for up to 1 year after the decision, to keep proof of the check, prevent fraud (forged documents, re-registration) and fine-tune our checks, then deleted; 30 days after they were sent if no decision has been made; immediately if the person is a minor or if you delete your account. The face template computed to compare the faces (a series of numbers derived from the face, not a photo — biometric data) is deleted as soon as the decision is made, unless the account is banned for fraud or because the person is a minor: it is then kept for 2 years after the ban, without any image, solely to prevent the same person from signing up again. If the verification was done by our fallback provider Didit, the images remain with it, where they are automatically deleted after 1 month; its audit logs (without documents) are kept for 365 days — see its privacy notice.
• Proof of verification (status and date of the verification, date of birth, expiry date and country of the document, check scores, a fingerprint of the document number used to spot one document being used for two accounts — never the number itself; for a Didit verification: result, date, control reference, date of birth): kept for as long as the account exists, deleted when it is closed.
• Accounting and transaction records: 10 years, pursuant to art. 958f CO.
• Account and content: when the account is closed, content is deleted and the account anonymised; orders are kept for 10 years (accounting rule above) without name or address; listing photos quarantined by moderation are erased at the latest 12 months after closure.
• Audience data (page views, anonymised technical fingerprint): 30 days.
• Log of sent e-mails (recipient, subject, body, delivery status): 24 months, then automatic purge.
• Reports and technical browser reports (IP address, browser): 12 months at most.
• Stripe payout account (sellers): the link between your Weared account and your payout account is kept for as long as your account exists, and deleted when it is closed. The accounting record of the transfer follows the 10-year rule above. The account opened with Stripe does not belong to us: we can ask for it to be closed, but the information Stripe must keep for its own obligations stays with Stripe.
• Disappearing messages and view-once media: they disappear from the conversation once read (at the latest 24 hours after sending); their content remains accessible to moderation only for 30 days, or until a decision on a pending report, and is then deleted.
• Encrypted backups (database and uploaded files): one copy per night, kept for 7 days, and one snapshot per week, kept for 8 weeks. Deleted data may therefore remain in them, encrypted, for up to about 8 weeks, after which it is gone.

You may request early deletion of your verification data at any time: contact@weared.ch.

In accordance with the nFADP and the GDPR, you have the rights of access, rectification, erasure, restriction, objection and portability, as well as the right to withdraw your consent at any time. You may exercise these rights through the site's confidential channels.

You also have the right to lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC) in Switzerland, or with an EU supervisory authority where applicable.

Identity verification and automated decisions. The automatic reading of the document and the face comparison support the decision; they do not make it: every verification is currently accepted or refused by a person at Weared. If automatic approval were ever switched on, you would be informed, and you could state your point of view and ask for a person to review the decision (nFADP art. 21, GDPR art. 22): contact@weared.ch.

We implement appropriate technical and organisational measures: encrypted connections (TLS), hashed passwords, encrypted backups, restricted administrative access and logging. Discretion and minimisation guide every one of our technical choices.

Photos of identity documents and verification selfies are encrypted at rest (AES-256-GCM), with a key kept outside the database. Only authorised people at Weared can access them, and every access is logged.

Where members located in the European Union access the platform, Weared qualifies as an intermediary hosting service within the meaning of Regulation (EU) 2022/2065 (Digital Services Act, DSA). Weared is not a very large online platform (VLOP) or a very large online search engine (VLOSE) under Article 33 DSA, as its average monthly EU audience remains well below the threshold of 45 million active users.

• Single point of contact — authorities: contact@weared.ch, languages accepted: French, German, Italian, English (Articles 11 and 12 DSA).
• Single point of contact — users: contact@weared.ch.
• EU legal representative (Article 13 DSA): none has been designated to date; their identity will be published on this page as soon as they are designated.
• Notice-and-action mechanism (Article 16 DSA): any third party may notify content it considers illegal via contact@weared.ch or the dedicated form on the platform, with a precise description of the content, its location (URL), the grounds of illegality and the notifier's contact details. Weared confirms receipt without delay and decides in a diligent, non-arbitrary and objective manner, notifying its reasoned decision and available redress (out-of-court dispute settlement under Article 21 DSA, judicial redress).
• Trusted flaggers (Article 22 DSA): notifications from entities recognised as trusted flaggers by a Digital Services Coordinator are handled as a priority.
• Terms and transparency (Articles 14, 15, 24 DSA): restrictions imposed on members, moderation and individual decisions are set out in clear and accessible terms; moderation statistics are published annually where the applicable threshold requires it.
• Advertising and profiling: Weared displays no targeted advertising based on profiling using special categories of data within the meaning of Article 9 GDPR (Article 26 DSA), and does not knowingly address minors (Article 28 DSA).

These commitments come in addition to, and do not replace, the obligations arising under the nFADP, the GDPR and Swiss law.

Weared loads no third-party advertising tracker: measurement is carried out by our own servers.

What depends on your country. In Switzerland, the law requires that you be informed of the purpose and of your right to refuse (Telecommunications Act, art. 45c let. b): measurement runs until you have refused. From the European Union, the EEA or the United Kingdom, it requires your prior consent (ePrivacy Directive, art. 5 §3): until you have answered the banner, nothing is written — no visit cookie, no page view, no fingerprint. One exception, for every visitor and with no cookie or any other storage on your device: a weekly counter adds up arrivals on the site by landing page (without its parameters, except the language), by referring site reduced to a short closed list (ChatGPT, Perplexity, Google, Bing, X…, “other” or direct access) and by the country indicated by Cloudflare, without recording any IP address, identifier or browser type; the IP address is used only, in memory and for 30 minutes at most, to avoid counting the same arrival twice. The country is inferred from an indication supplied by our edge host Cloudflare; in its absence, the most protective regime applies.

The cookies.

• Session cookie — strictly necessary: keeps you signed in for a rolling 30 days from your last visit, and at most 90 days after signing in. Without it, staying signed in is impossible.
• “wc” — strictly necessary: remembers your choice in the banner, for 6 months. Without it, the question would be put to you again on every page.
• “wv” — subject to your choice: a random visitor identifier, valid for 6 months, inaccessible to the page’s JavaScript. It is used for audience measurement and for de-duplicating clicks. If you refuse, it is not set — and if it already existed, it is deleted.
• “weared_lang” — strictly necessary: remembers the language you chose, for one year.
• “aff” — set for one year when you arrive through a partner link, to attribute your sign-up to that partner. It is not set if you refused in the banner, nor — from the EU, the EEA or the United Kingdom — until you have accepted the marketing purpose.
• “par” — set for one year when you arrive through a seller's link, so that your sign-up is attributed to her if you create an account later (referral). It is not set if you refused in the banner, nor — from the EU, the EEA or the United Kingdom — until you have accepted the marketing purpose.

What we record when measurement is active. On your first visit: the landing page, the site you came from (referrer), your browser (user-agent), the language requested, Cloudflare’s country indication, and — if they appear in the address — the campaign parameters utm_source, utm_medium, utm_campaign, utm_term, utm_content as well as the advertising click identifiers gclid, fbclid, msclkid and ttclid. Thereafter: the pages viewed, with their date. This audience data is kept for 30 days (§7).

What refusing actually switches off. The “wv” cookie, the visit record and its attribution, the advertising click identifiers, the technical fingerprint, fine-grained measurement in the browser — scroll depth, time spent on a page, form submission — and any event sent back to an ad network. What remains is a plain count of the pages served, which carries neither a visitor identifier nor an account identifier, and is therefore attached to no one. Refusing takes nothing away from the service.

Technical fingerprint of the visitor. A fingerprint of the browser’s technical characteristics is computed on our server, for anti-fraud purposes and to protect accounts. For audience measurement it follows the same rule as the rest: no measurement, no fingerprint. A fingerprint is, however, computed at sign-up, regardless of your choice, to limit multiple accounts and fraud. It is never used to follow you from one site to another, nor for advertising.

Browser local storage. The site stores your display preferences in your browser (localStorage) — theme, discreet mode, guided tours already seen — without sending them to the server.

Robots. No cookie is set for an indexing robot. Only a counter is kept, by day, page, robot name and result of the following check, with no IP address: the address of a robot presenting itself as Google’s, Bing’s, Apple’s or Yandex’s is used only to check through DNS (reverse, then forward lookup) that it really is; it stays in memory for 24 hours at most and is never recorded.

Ad networks. An event (sign-up, purchase) is sent back to the network that brought the visit only if you have accepted the marketing purpose in the banner. It is sent from our server, with hashed identifiers (SHA-256) — never your e-mail address in the clear. As long as no campaign is running, this mechanism is inactive in any case and nothing is sent.

You can change your mind at any time: add ?cookies=1 to the address of any page to reopen the banner. “Necessary only” counts as a withdrawal there.