Privacy Policy & Imprint

Imprint

Website operator
worksmart365 GmbH
Schöngrundstrasse 13
6048 Horw, Switzerland
UID: CHE-409.854.789
Commercial Register, Canton of Lucerne

Geldfuchs is a product of worksmart365 GmbH and not a separate legal entity.

Authorised representative: Fabrizio Marra, Managing Director
Contact: hallo@geldfuchs.ch
Website: geldfuchs.ch

Disclaimer

The content on this website has been prepared with the utmost care. However, we cannot guarantee the accuracy, completeness, or timeliness of the content. The content is provided solely for general information and personal reflection and does not constitute investment, tax or legal advice. No liability is accepted for any damage arising from the use of this information. As a service provider, we are responsible for our own content on these pages.

No investment advice

Geldfuchs is a tool for visualising and planning your personal finances. The app and the content on this website do not constitute investment advice, financial, tax, or legal advice within the meaning of the Swiss Financial Services Act (FinSA) or the Financial Institutions Act (FinIA). Any decisions regarding financial products are your own responsibility. Where needed, please consult a qualified professional.

Affiliate and referral links

Blog posts on geldfuchs.ch/blog contain affiliate and refer-a-friend links to Swiss financial providers (e.g. neon, VIAC, findependent, Saxo, Relai). When you sign up through such a link, both you and we receive a benefit (e.g. a fee discount or starting credit). This costs you nothing. We only recommend providers we actively use ourselves – our recommendations are not influenced by this compensation. The Geldfuchs app itself is and will remain commission-free: no products are shown to you within the app in exchange for payment.

Privacy policy

This website processes personal data in accordance with the Swiss Data Protection Act (revDSG) and, where applicable, the EU General Data Protection Regulation (GDPR). The controller for the purposes of these declarations is worksmart365 GmbH as listed in the imprint above.

Hosting (GitHub Pages)

This website is hosted by GitHub Pages (GitHub, Inc., 88 Colin P. Kelly Jr. Street, San Francisco, CA 94107, USA). When you visit the site, the hosting provider automatically processes technical access data (IP address, browser type, operating system, referrer, time of visit) – this is necessary for delivering the content and maintaining IT security. These server logs are handled by GitHub in accordance with the GitHub Privacy Statement. For customers in the EU/Switzerland, GitHub relies on EU Standard Contractual Clauses.

Fonts (Google Fonts)

The font Inter is loaded via Google Fonts (Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland) for typography. When you load the page, a connection is made to Google's servers, which means your IP address is transmitted to Google. Google does not set cookies for this. Legal basis: legitimate interest in consistent, high-performance presentation (Art. 6(1)(f) GDPR). More: Google Privacy Policy.

Email tips & email access (beehiiv)

Sign-up for the Geldfuchs email tips and for email access to the learning games on play.geldfuchs.ch runs through beehiiv (beehiiv Inc., 228 Park Ave S, PMB 77509, New York, NY 10003, USA). When you submit the form, the data you provide (e.g. email address) along with technical metadata (e.g. IP address, browser, timestamp) are transmitted to beehiiv and processed there on our behalf. We use this data solely to send you email tips from Geldfuchs and to unlock your access to the learning games on play.geldfuchs.ch.

Legal basis: consent given by submitting the form (Art. 6(1)(a) GDPR / Art. 31(1) revDSG). You can withdraw your consent at any time – via the unsubscribe link in every email or with a brief message to hallo@geldfuchs.ch, and we will delete your entry. Processing partly takes place in the USA; beehiiv relies on the EU Standard Contractual Clauses for these transfers. More on how beehiiv handles data: beehiiv Privacy Policy.

Analytics (Cloudflare Web Analytics)

This website uses Cloudflare Web Analytics (Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA) for anonymous reach measurement. Only aggregated metrics are collected: page views, time on site, referrer (where you came from), broad geographic region (country), browser type, and device category.

No tracking, no cookies: Cloudflare Web Analytics sets no cookies, uses no browser fingerprinting, and stores no IP addresses. No individual visitor profiles are created; Cloudflare itself states: "Cloudflare does not track individual visitors." Recognition across sessions or devices is not possible.

Legal basis: legitimate interest in privacy-respecting reach measurement (Art. 6(1)(f) GDPR / Art. 31(1) revDSG). As no personal data is processed, no consent is required. Cloudflare relies on EU Standard Contractual Clauses for data processing in the USA. More: Cloudflare Web Analytics · Cloudflare Privacy Policy.

Usage measurement in the Geldfuchs Academy

In the learning modules of the Geldfuchs Academy (geldfuchs.ch/academy/wissen/, in German) we count which modules and lessons are opened and completed, how long a lesson stays open, how many questions in the knowledge check are answered correctly, whether flashcards and case studies are used, and which grade an exam ends with. We also count clicks on the offer and on the app, and when feedback is opened and sent.

We store only fixed identifiers (for example "module 6, lesson 3, question 4"), counters, yes/no values and durations, the device class (phone, tablet or computer) and a rough origin (from the app, from the website, from elsewhere). We never store the wording of your answers, no names, no email addresses, no IP address and no device fingerprint.

If you are signed in with your Geldfuchs account, the entries belong to your account. Without signing in, we use a random identifier that is stored only in your browser (local storage, not a cookie) and has no link to your person.

The purpose is to develop the Academy further: we see which modules are in demand, where lessons are abandoned and which questions are too hard (legitimate interest). The entries are held in our own database at Supabase in the Zurich region, Switzerland. We use no third-party analytics or advertising services for this and do not pass the data on. We delete the entries automatically after 13 months (daily deletion run). If you delete your Geldfuchs account, the entries linked to your account are deleted immediately as well.

You can object to the measurement at any time: in the footer of every page of the learning modules you will find «Messung ausschalten» (turn off measurement; applies to this browser, turn it back on in the same place). Or write to us at hallo@geldfuchs.ch. If your browser sends the "Global Privacy Control" or "Do Not Track" signal, we do not measure anything in any case.

Web analytics with consent (Google Analytics & Microsoft Clarity)

In addition, we use – only with your explicit consent – two web analytics services. On your first visit a banner appears; these services load only after you click "Accept". If you decline or don't respond, they stay inactive (implemented via Google Consent Mode v2, default "denied").

Google Analytics 4 (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) helps us understand which pages and content are used. It records, among other things, page views, time on page, referrer, approximate region as well as device and browser data, and sets cookies. IP addresses are processed by Google in truncated form.

Microsoft Clarity (Microsoft Corporation, One Microsoft Way, Redmond, WA 98052, USA) provides anonymised heatmaps and session recordings (mouse, scroll and click behaviour) to improve usability. Form-field entries and text are masked by default. Clarity also sets cookies.

The legal basis is your consent (Art. 6(1)(a) GDPR / Art. 6(6) revDSG), which you can withdraw at any time with effect for the future – for example by clearing your browser's site data for this website. For data transfers to the USA, both providers rely on the EU-US Data Privacy Framework and EU Standard Contractual Clauses. More: Google Privacy Policy · Microsoft Privacy Statement.

Functional cookie for subscribers (gf_kunde)

When you sign in to the Geldfuchs app with Premium (annual subscription, including the free trial, or Lifetime), the app stores the cookie "gf_kunde" in your browser for the domain geldfuchs.ch and its subdomains. It contains only the value 1, no personal data and no identifier of your account. A script on this website reads it in your browser and shows "Open the app" instead of "Free trial" in the header. Your browser sends the cookie along with every request to a page on geldfuchs.ch; we do not evaluate it on any server and do not store it.

The cookie expires after 400 days at most. The app removes it when you sign out with the «Abmelden» button, when you delete your account and when it finds, the next time you open it, that you no longer have an active subscription. You can delete it yourself in your browser at any time; you will then see "Free trial" again, nothing else changes.

Legal basis: legitimate interest in showing you, as a customer, the direct way into the app (Art. 6(1)(f) GDPR / Art. 31(1) revDSG). The cookie is used neither for analytics nor for advertising.

Signing in to the Geldfuchs Academy

The learning modules of the Geldfuchs Academy (geldfuchs.ch/academy/wissen/, in German) are included in the app subscription. So that we can check your access, you sign in there with your Geldfuchs account: with a code we send you by email, or directly from the app.

When you open the Academy from the app, our server creates a one-time login for your own account. It sits in the part of the address after "#", which your browser does not send to web servers. The Academy removes it from the address straight away and uses it to sign you in with our sign-in service. It works only once and expires after one hour at the latest. If this fails, you sign in with the code as usual.

The same applies the other way round: if you click a link into the app while signed in to the Academy, our server creates such a one-time login for your own account, and the app uses it to sign you in. If someone else is signed in to the app at that moment, the app first asks whether you want to switch and signs that person out only if you switch. If there is no use of the Academy with mouse, keyboard, scrolling or tapping for 30 minutes, it signs you out for security reasons; one minute before, a notice with "Stay signed in" appears. For this, the Academy stores the time of your last activity in the session storage of the tab (entry "gfa_last_activity"); it does not leave your device. The app signs you out after the same period; it stores this time in your browser's storage (entry "gf_last_activity") so that all open app tabs share the same period, and it does not leave your device either.

After you sign in, your browser keeps the session in the session storage (sessionStorage) of geldfuchs.ch. It applies only to this tab and ends when you close it. With it, the Academy loads the content of your subscription from Supabase (Zurich region, Switzerland), the same service that holds your account in the app. The Academy stores your learning progress (completed lessons, quiz results, flashcards, exams) only in your browser's local storage (entries starting with "gfa_"). The learning progress itself stays in your browser until you clear your browser's site data; for usage measurement we count individual steps, without your answers (see "Usage measurement in the Geldfuchs Academy").

We load the program library for signing in via the jsDelivr service (cdn.jsdelivr.net) of Volentio JSD Limited, England; this transmits your IP address to that service. The pages of the learning modules load neither Google Analytics nor Microsoft Clarity.

Legal basis: performance of your subscription contract (Art. 6(1)(b) GDPR / Art. 31(2)(a) revDSG). More about your account is in the app's privacy policy.

Feedback in the Geldfuchs Academy

Below each module you can send us feedback. When you are signed in, we store it like feedback in the app (text, type, module and lesson, device class, technical identifier of your account, your email address only if you tick «Bitte antworte mir per E-Mail») and notify our mailbox feedback@geldfuchs.ch (Microsoft 365). If you are not signed in, your email program opens; the section "Contact by email" then applies.

Contact by email

If you get in touch (hallo@geldfuchs.ch), the information you send (email address, name, message content) will be stored and used solely to handle your enquiry. It will not be passed on to third parties. Email routing runs via Microsoft 365 (Microsoft Ireland Operations Ltd., Dublin, Ireland).

External links

This website contains links to external websites (e.g. worksmart365.ch, investsmart365.ch, livesmart365.ch). Clicking these links takes you away from geldfuchs.ch. We accept no liability for the content, privacy practices, or security of those external sites.

Relationship to the Geldfuchs app

This privacy policy applies to the marketing website geldfuchs.ch. The Geldfuchs app itself processes additional personal financial data and has its own privacy policy, available within the app and at app.geldfuchs.ch/legal/datenschutz.html (in German). Data in the app is transmitted encrypted and stored on servers in Switzerland (Zurich region) or locally in the browser.

Subscription and payment processing (Stripe): The app is available as an annual subscription with a 14-day free trial. We use Stripe for payment processing. Stripe processes the payment data you provide when paying (e.g. credit card details); processing locations include the USA and the EU. Stripe's privacy policy applies in addition. To ensure there is only one free trial per person, when a trial starts we compare your email address and an identifier of your card generated by Stripe (a fingerprint, not the card number) with previous trials.

Your rights

You have the right at any time to access, correct, delete, and restrict the processing of your personal data, as well as the right to data portability. A message to the contact address listed in the imprint is sufficient.

Copyright

Last updated: 27 October 2026. This privacy policy will be updated as new integrations go live.