Privacy
This policy explains what FleetForge GmbH collects through this website, why it is used, and how to make a privacy request.
Last updated: 21 September 2026
This notice covers the public website, project inquiries, and the private administration area. Please do not include passwords, payment details, or sensitive personal information in a project inquiry.
FleetForge GmbH is responsible for the processing described here.
FleetForge GmbH
Brunnacherstrasse 23
8035 Zürich
Switzerland
For privacy questions or requests, email [email protected] and mention “Privacy request”.
When you submit an inquiry, the website stores your name and email address, your project description, and any optional company, service interest, budget range, and timeline you provide. It records when you acknowledged the privacy notice and assigns the inquiry a status. If an administrator adds notes while handling the inquiry, those notes are stored with it. The application does not save a source IP hash in the inquiry record.
When you apply for a published role, the website stores your name, email address, optional phone number and portfolio link, your resume file, and any transcript or certificate files you choose to attach, along with your cover letter. These documents are stored on the FleetForge server outside the public website and are available only to authorised FleetForge administrators. Applications are used to assess the role you selected and tracked through the hiring workflow. Do not include sensitive personal information that is not relevant to your application.
The public website can display published company, service, project, and team information, including team names, roles, biographies, and profile images. If you use the private administration area, the system handles your administrator email address, a password hash, authentication session records, and an audit record of administrative changes.
The privacy notice banner stores only whether it has been dismissed and the notice version in your browser's local storage. It does not record an acceptance or rejection of tracking technologies.
Inquiry information is used to review and respond to your request, discuss a potential project, and manage the resulting business correspondence. Candidate information is used to assess an application, communicate about the selected role, and record hiring-stage decisions. Administrator information is used to authenticate authorised users, protect the administration area, and record content changes. Public company and team information is displayed to describe FleetForge and its services. Local storage remembers that you dismissed the privacy notice banner.
Inquiry records and their notes are stored in PostgreSQL on the same virtual server as the website and are available to authorised FleetForge administrators. The website is hosted on Akamai Cloud (formerly Linode). Its domain is routed through Cloudflare, which handles web traffic and may process connection details and security or operational metadata. Cloudflare describes processing metadata for its core application services in data centres in the United States and Europe, while requests use its global network. See Cloudflare's data protection information and privacy policy. Akamai's service agreement describes its data processing addendum and privacy trust center.
The deployment configuration confirms the hosting provider but does not expose the virtual server's data-centre country or the provider contract and transfer safeguards. FleetForge must confirm those details from its hosting account before this notice can give a complete country-specific account of hosting transfers. The application's contact form stores inquiries in the database and does not send them to an email provider. No advertising or analytics tracker is added by the application code.
The application has no automatic deletion period or administrator delete function for inquiry records or their notes. They remain in the database until an authorised operator removes them directly or the database is otherwise removed. FleetForge should review records periodically and remove them when they are no longer needed, subject to applicable record-keeping obligations. Candidate applications follow the same operational retention approach until a hiring administrator removes them or the database is otherwise removed. There is likewise no automatic purge configured in the application for audit records or expired administrator-session rows. The administrator session cookie expires after seven days; signing out deletes its matching session record.
Cloudflare and hosting-system logs are subject to the providers' settings, contracts, and retention practices; the application configuration inspected for this notice does not specify their log-retention periods.
Cloudflare is a global service and its documentation describes processing certain service metadata in the United States and Europe. The website and database run on an Akamai Cloud virtual server, but the deployed configuration inspected for this notice does not identify its data-centre country. The applicable provider agreements and transfer safeguards must be confirmed by FleetForge from its provider accounts. Contact FleetForge using the details above for a current update.
Subject to applicable law, you may request access to personal data concerning you, ask for inaccurate information to be corrected, and request erasure or object to processing where those rights apply. Contact FleetForge using the details above. We may need to verify your identity before responding and may retain information where a legal obligation or other valid reason requires it.
For further information about rights under Swiss data protection law, see the Federal Data Protection and Information Commissioner guidance.
Access to inquiry records is restricted to authenticated administration users. The website is served over HTTPS. No online service can guarantee absolute security. If you believe you have found a security issue, contact FleetForge without including confidential data in your first message.
The public website uses local storage only to remember that you dismissed the privacy notice banner. The application code does not set advertising or analytics cookies or use analytics trackers. When an administrator signs in, the website sets a first-party fleetforge_session cookie marked HttpOnly and SameSite=Strict; it is marked Secure in production and expires after seven days. It is used only to authenticate the administrator.
We may update this policy when the website or the information handled through it changes. The date above shows when this page was last updated.