Privacy Policy

Last updated: October 9, 2026

This Privacy Policy explains how GearTrain collects, uses, and protects personal information when you visit our website or use the Service. It also describes your rights and how to exercise them.

Who We Are

The Service is operated by Robert William Narvaez, based in Switzerland. For the purposes of the Swiss Federal Act on Data Protection (nFADP) and, where it applies, the EU General Data Protection Regulation (GDPR), the controller of your personal data is:

Robert William Narvaez, Switzerland. Contact: [email protected]

Scope

This Policy applies to personal data we process when you visit our website, create an account, or use the Service. It does not apply to third-party services you access through your scripts, which have their own privacy policies.

Information We Collect

We collect the following categories of information:

  • Account information. Your email address.
  • Authentication data. Your password, and the codes and tokens used for one-time passcode sign-in, email verification, and password reset, stored in a protected form.
  • Session and security data. Session identifiers and technical data used to protect the Service, including your IP address. We use IP addresses to prevent abuse and to protect accounts.
  • Your Content. The scripts, files, and data you store, along with the run logs, run events, and console output the Service records. Your Content may contain personal data about you or others.
  • Usage data. Counters such as runs per month and storage used, used to operate the Service and enforce plan limits.
  • Communications. The content of messages you send to support.

We do not operate advertising or analytics tracking on the Service, and we do not sell your personal data.

Cookies

We use a single essential cookie to keep you signed in. We do not use advertising or analytics cookies. You can block or delete cookies in your browser, but if you block the session cookie you will not be able to sign in.

How We Use Information

We use the information described above to:

  • create and administer your account, authenticate you, and provide the Service, including scheduling and running your jobs;
  • store, execute, and display Your Content and run history;
  • enforce plan limits and prevent abuse, fraud, and security threats;
  • send transactional emails such as email verification, password reset, password-changed notifications, one-time passcode emails, and usage alerts;
  • provide customer support; and
  • comply with legal obligations and respond to lawful requests.

We do not use your information for advertising or profiling.

Legal Bases for Processing

Where the GDPR or the nFADP requires a legal basis, we rely on:

  • Performance of a contract: to provide the Service you have signed up for and to administer your account.
  • Legitimate interests: to secure and improve the Service, prevent abuse, and enforce our Terms. These interests are balanced against your rights.
  • Legal obligation: to comply with applicable law and lawful requests.

Service Providers and Sub-Processors

We use a small number of service providers to run the Service. Some process personal data on our behalf, and only as needed:

  • Hetzner Online GmbH (Germany) provides the servers and databases where your data is stored; it does not use your data for its own purposes.
  • MailerSend, Inc. (United States) sends transactional email on our behalf. We share your email address with it for that purpose. MailerSend stores data in the European Union and adheres to the EU-U.S. and Swiss-U.S. Data Privacy Framework principles for transfers from the EEA, Switzerland, and the United Kingdom.

We may also disclose personal data where required by law, in response to valid legal process, or where we believe it is necessary to prevent harm or investigate abuse. If we are involved in a merger, acquisition, or sale of assets, personal data may be transferred as part of that transaction.

We do not sell your personal data.

Retention

We keep personal data for as long as your account is active or as needed to provide the Service. Run logs and events are retained according to your plan's log retention period. When you delete content or close your account, we remove it from active systems, but copies may persist in backups for a reasonable period. We may retain certain records longer where required by law or to resolve disputes, prevent abuse, or enforce our agreements.

Security

We take reasonable technical and organizational measures to protect your information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

International Data Transfers

Our servers are located in Germany. Your data is therefore primarily processed within the European Economic Area. Where we transfer personal data to a country outside the EEA or Switzerland, we rely on an adequacy decision (such as the European Commission's adequacy decision for Switzerland) or another lawful transfer mechanism, including the Data Privacy Framework.

Your Rights

Subject to applicable law, you may have the right to:

  • access the personal data we hold about you;
  • request correction of inaccurate or incomplete data;
  • request deletion of your data;
  • request restriction of, or object to, certain processing;
  • receive your data in a portable format; and
  • withdraw consent where processing is based on consent.

You can exercise many of these rights directly in your account, or by contacting us at [email protected]. We may ask you to verify your identity before responding. You also have the right to lodge a complaint with a supervisory authority, such as the Swiss Federal Data Protection and Information Commissioner or the authority in your country of residence.

Children

The Service is not intended for anyone under 16 years old, and we do not knowingly collect personal data from children under 16. If you believe a child has provided us with personal data, please contact us and we will remove it.

Changes to This Policy

We may update this Policy from time to time. If a change is material, we will make reasonable efforts to notify you. The date at the top of this page shows when it was last updated.

Contact

If you have questions about this Policy or your personal data, contact us at [email protected].