Swiss Federal Act on Data Protection (FADP / revDSG, since 1 Sep 2023).
Dual-currency merchant backend at taler.hacktivism.ch:
GOA (explorational) and CHF (taler-ops path).
Operators of the hacktivism.ch GNU Taler stack. Experimental public deployment; no separate DPO appointed.
| Data | Examples | Typical retention |
|---|---|---|
| Instances | merchant_id, serial, config | Instance life + up to 12 months after delete/wipe |
| Authentication | API / login tokens | Until expiry, revoke, or instance delete |
| Orders | order_id, amount, summary, paid/wired, time | Service life or wipe; public stats may list recent amounts/summaries |
| Deposits / refunds | proofs, amounts, reasons | Service life or wipe |
| Settlement accounts | payto / account labels | While configured |
| Exchange metadata | GOA/CHF exchange used | With related order records |
| Technical logs | IP, path, status | Days–weeks (rotation) |
| Public stats.json | Aggregates, recent activity | Overwritten continuously |
Not retained: wallet private keys; payment card PANs; government ID documents unless a separate KYC feature is enabled by operators.
exchange.hacktivism.ch)exchange.taler-ops.ch)No sale of personal data.
Access, rectification, deletion, and objection under the FADP (within legal limits). Complaint: Swiss Federal Data Protection and Information Commissioner (FDPIC / EDÖB).