Privacy policy

Last updated: 15 October 2026

This policy tells you which personal data we process when you use ECHO or get in touch with us, and what rights you have. It follows the revised Swiss Federal Act on Data Protection (FADP).

Controller

PIXELS AG is responsible for processing your data. The responsible person is Pascal Arnold. For any privacy question, write to hello@pixels.ch.

What data we process and why

Request via the form: When you request access on the product page, we store your name, email address, website, message, as well as your IP address and the source of the request. We use these details to reply to you and to check whether ECHO fits your needs. Submitting the form triggers an email to us and a confirmation to you.

Cockpit account: To give you access to the cockpit, we store your email address, your name, a hash of your password and the times you sign in. An audit log records security-relevant actions together with the email address and IP address so that we can detect misuse.

Use of the product: On your behalf, ECHO queries AI services and stores their answers for analysis. The queries are about brands and competitors, not people. In individual cases an AI answer may still name a person, for example a company owner. We store such details only as part of the answer and do not deliberately analyse them in relation to a person.

Google Search Console connection (optional): If you connect your Search Console in the cockpit, we store an access token in encrypted form, the selected property and the retrieved search queries with clicks, impressions, CTR and position. We only read (scope webmasters.readonly) and only when you start the retrieval. The result is question suggestions that you confirm.

Search Console queries are aggregated by Google and contain no personal details. Queries that look like an email address or phone number are additionally discarded on import.

If you disconnect, we revoke the grant at Google and delete the token and the retrieved queries. Confirmed questions remain. We keep the email address of the connected Google account even after you disconnect, because Google limits how many accounts have ever granted access to our app and we could not track that quota otherwise. If you request the connection, we also store your request with email address, note and our decision.

Crawler visits via Cloudflare (optional): If you set up the Cloudflare connection in the cockpit, we store your API token in encrypted form, the zone ID and the host name of your website. Once a day we retrieve from Cloudflare how often known AI crawlers fetched your website, grouped by the requester's identifier (user agent), response code and data volume. We do not retrieve the IP addresses of your visitors.

Google results via DataForSEO: If the AI box above the Google results is switched on for a project, we retrieve the Google results for that project's questions through the DataForSEO service. Only the question, its language and the chosen location go to DataForSEO, no personal data.

Emails and the «ECHO Update» newsletter: Anyone with cockpit access receives system emails from us, such as invitations, measurement reports and the monthly briefing. From time to time we also send the «ECHO Update» newsletter with the changes from «What's new» to people with active cockpit access. Every issue contains an unsubscribe link. We send both through Brevo.

Cookies and consent

Necessary cookies are always in use. A session cookie keeps you signed in after login. An echo_geraet cookie remembers for 90 days after a sign-in that this browser knows your account. That way we do not lock you out when others behind the same internet address enter wrong passwords. A lang cookie remembers your language choice. A cookie_consent cookie stores your consent choice as JSON with the selected categories and a timestamp and stays for 180 days.

For statistics and marketing we ask for your consent. On your first visit to the public pages we ask you through a banner. Without your agreement we set no statistics or marketing cookies and store no data that lets us recognise you. We use Google's consent mode: as long as you do not agree, only anonymous, aggregated signals without cookies are transmitted, from which no person can be derived. If you agree, the full statistics and marketing features are added. You can change or withdraw your choice at any time via the Cookie settings link in the footer. Inside the logged-in cockpit we use none of these statistics and marketing services.

Fonts (Google Fonts)

The website and the cockpit load their fonts from Google Fonts. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. When you open a page, your browser connects to Google servers for this (fonts.googleapis.com and fonts.gstatic.com). In doing so Google receives your IP address and technical details of your browser. This happens regardless of your cookie choice and also inside the logged-in cockpit. The basis is our legitimate interest in a consistent presentation. Processing may also take place in the United States.

Google Tag Manager

Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The Tag Manager loads and controls the statistics and marketing services listed below. It loads on every visit to the public pages and acts according to your consent: without agreement it transmits only anonymous, cookieless signals, and after your agreement the full data. In doing so Google receives technical connection data such as your truncated IP address. The legal basis for the consent-based data is your consent, which you can withdraw at any time via the Cookie settings. Processing also takes place in the United States.

Google Analytics 4

Provider: Google Ireland Limited, Dublin, Ireland. Purpose: we measure how the site is used, for example which pages are opened and where visits come from, in order to improve our offering. For this Google sets cookies and processes your shortened IP address and usage events.

The legal basis is your consent (Statistics category) with withdrawal at any time via the Cookie settings. The data is also processed in the United States. Google deletes user-level data after 14 months at the latest. This service runs only if you agree to it.

Google Ads (conversion and remarketing)

Provider: Google Ireland Limited, Dublin, Ireland. Purpose: we measure which ads lead to a request (conversion) and show you relevant ads on Google and its partners (remarketing). For this Google sets cookies and processes your IP address and an advertising identifier.

The legal basis is your consent (Marketing category) with withdrawal at any time via the Cookie settings. The data is also processed in the United States. The advertising cookies are usually kept for up to 90 days. This service runs only if you agree to it.

Meta Pixel

Provider: Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. Purpose: we measure the success of campaigns on Facebook and Instagram and build audiences for ads. For this Meta sets cookies and processes your IP address as well as device and usage data.

The legal basis is your consent (Marketing category) with withdrawal at any time via the Cookie settings. The data is also processed in the United States by Meta Platforms, Inc. The cookies are usually kept for up to 90 days. This service runs only if you agree to it.

Protection against abuse (Cloudflare Turnstile)

We protect the request and registration forms against automated submissions with Cloudflare Turnstile. The provider is Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA. As soon as you open a page with one of these forms, Turnstile checks in the background whether a person is using it. To do so, Cloudflare processes your IP address and technical characteristics of your browser and device. Turnstile sets no cookies and does not use the data for advertising.

When you submit a form, we also check ourselves whether the website you entered exists and whether the form was filled in within a plausible time. Submissions that look automated are stored separately and trigger no email.

The legal basis is our legitimate interest in protecting the forms and our inboxes against abuse. Cloudflare also processes the data in the United States.

Recipients and transfers abroad

We work with service providers that process data only on our behalf. Hetzner runs our servers in Germany (EU). Brevo sends our emails from within the EU. OpenAI, Anthropic, Perplexity and Google process the AI queries in the United States. If you have enabled the Search Console connection, we retrieve your search queries from Google Ireland Limited, where processing also takes place in the United States. Google and Meta also process the consent-based statistics and marketing data in the United States. Cloudflare checks the forms for automated submissions, also in the United States.

If you have set up the Cloudflare connection, Cloudflare also provides us with the number of crawler visits to your website. DataForSEO provides the Google results for the optional AI box. Google provides the fonts of the website and the cockpit (Google Fonts).

Where data goes to the United States or other countries outside Switzerland and the EU, we base the transfer on appropriate safeguards under Art. 16 f. FADP, such as standard contractual clauses or a recognised certification of the provider.

How long we keep data

We keep your data for as long as your account or our business relationship exists, or as long as legal obligations require. Once we no longer need data, we delete it.

Your rights

Under the FADP you can request information about the data we hold about you. You can have it corrected or deleted, request its release or transfer, and object to processing.

For all of these, write to hello@pixels.ch. To make sure no data reaches the wrong person, we verify your identity first.

If you disagree with how we process your data, you can contact the Swiss Federal Data Protection and Information Commissioner (FDPIC).

No automated individual decisions

We do not make decisions about you based solely on automated processing, and we do not carry out profiling within the meaning of the FADP.

Security

We transmit data encrypted over TLS, store passwords only as a hash, and restrict access by role.

Changes

If our processing changes, we update this policy. The version on this page is the one that applies.