Privacy

This notice describes the data processed when you use the public pages and tours. The public pages do not use advertising cookies and do not require an account. Your chosen language appears in the URL.

Controller

Once Upon Here

QR scans and visitor statistics

When a short link associated with a QR code is opened, we record the scanned code and its medium, the language, the time rounded down to the hour, and the device family (iOS, Android, or other).

To count visitors per day, the server calculates a daily HMAC value in memory from the IP address, browser data, and a random key renewed each day. The daily value is stored with the scan; the IP address, browser data, and key are not stored in the scan record. The key is erased from memory after the day changes. Scan records have no planned deletion date so statistics can be compared across years.

Tour map and location

The map is loaded only when you open it. Your device then downloads map data directly from swisstopo (vectortiles.geo.admin.ch), which receives your IP address. For tours outside swisstopo's coverage, we use OpenFreeMap (OpenStreetMap data), which also receives the IP address. The short notice beside the map identifies the provider used.

Your location is requested only when you tap “Show my location”. It stays on your device and is not sent to us. The “Directions” button opens your device's map app; that provider handles data under its own privacy notice.

Progress saved on your device

When tour-progress saving is available and enabled, your browser stores the current tour, viewed or unlocked stages, and game tokens on your device. This information is not sent to our server. You can remove it using the “Clear my progress” link. This section applies once the feature is available in the tour.

Hosting and access logs

The pages and application data are hosted in Switzerland. For security, the hosting provider may keep access logs containing IP addresses.

The platform uses Microsoft Azure in the Switzerland North region. Microsoft is a US company. Choosing a Swiss Azure region describes where the deployed resources are located, but does not by itself describe all support operations or subprocessors. Microsoft's contractual data-protection terms and current subprocessor list apply.

Your rights

For questions or to exercise your rights under the Swiss Federal Act on Data Protection (FADP), contact the controller listed above. You may also contact the Federal Data Protection and Information Commissioner (FDPIC).

Last updated: 10/14/2026