# Privacy notice · Merchant · Swiss FADP

Controller: operators of the **hacktivism.ch** GNU Taler stack (`taler.hacktivism.ch`).
Dual currency: **GOA** (explorational) and **CHF** (taler-ops exchange path).

Processing under the Swiss Federal Act on Data Protection (**FADP / revDSG**, since 1 Sep 2023).

## Data retained

| Data | Examples | Retention |
|------|----------|-----------|
| Instances | merchant_id, serial, config | Instance life + up to 12 months after delete/wipe |
| Auth | API / login tokens | Until expiry, revoke, or instance delete |
| Orders | order_id, amount, summary, paid/wired, time | Service life or wipe; public stats may show recent aggregates |
| Deposits / refunds | proofs, amounts, reasons | Service life or wipe |
| Settlement | payto / account labels | While configured |
| Exchange metadata | GOA/CHF exchange used | With related order records |
| Technical logs | IP, path, status | Days–weeks (rotation) |
| Public stats.json | Aggregates, recent activity | Overwritten continuously |

**Not retained:** wallet private keys; card PANs; government ID unless separate KYC is enabled.

## Purposes

Accept payments, refunds, settlement; security and operations of this experimental backend.

## Rights

Access, correction, deletion, objection (FADP). Complaint: Swiss **FDPIC / EDÖB**.

## Related

- [Merchant terms](https://taler.hacktivism.ch/terms)
- [Exchange privacy](https://exchange.hacktivism.ch/privacy)
- [Bank privacy](https://bank.hacktivism.ch/intro/privacy.html)