Privacy policy
The German version of this text is authoritative.
This policy explains how Miracreative processes personal data. The Swiss Federal Act on Data Protection (FADP) applies; the EU GDPR also applies where applicable.
1. Controller
Ibrahim Smailagic, Hauptstrasse 23, 9476 Weite, support@miracreative.ch
2. Visiting the website
On each visit, our hosting provider in Switzerland stores technically necessary data (IP address, time, page visited, browser) in server log files. This data serves secure operation and is deleted after a short time.
3. Requests, orders and messages
When you send a request via a profile or request a package, we store your name, email, message, optionally your budget and – only with your express consent – your phone number. This data is forwarded to the chosen provider so they can reply to you. From that point on, the provider is responsible for processing your data. Messages exchanged between you and the provider in an order are stored together with the order; both parties are notified by email. To prevent misuse, we store an irreversible hash of your IP address.
4. Quotes and project requests
If you post a project, we store the title, description, category, region, budget, date, name and email. The request only becomes active once you have confirmed your email address. Registered providers in the matching category see the title, description, region, budget and date – but not your name or email address. A provider only receives these if you accept their quote. Quotes contain the service, price and delivery time and are sent to you by email. We delete unconfirmed requests after 7 days and all others after 24 months at the latest.
5. Provider accounts
For a profile, we store the email, an encrypted password and the profile details. Only the details you enter as public in your profile are shown publicly. If you provide a UID number, we check it in the federal public UID register and then show the “Verified” badge (the UID itself is not shown publicly). From the timing of requests and replies, we calculate the usual response time shown on the profile. Once a month we send a report with your profile’s figures; you can unsubscribe with one click. For admin accounts, two-factor login with an authenticator app can be set up; for this we store a secret key and encrypted recovery codes. You can delete your account at any time.
6. Premium and invoices
For Premium, we store the billing name, address, amount, term and payment status. We send invoices, renewal invoices and payment reminders by email with a QR code. Payment is made by bank transfer. We do not store any credit card data.
7. Saved list and “My orders”
The saved list stores your saved profiles only locally in your browser (localStorage); it is not transmitted to us until you open the saved list. For “My orders”, we send you a link by email on request that is valid for 24 hours. For this we store an irreversible code of the link.
8. Invitations to creatives
We invite creatives with publicly available business contact details (e.g. from their website) by email to a free listing. The prepared profile only becomes publicly visible once the person takes it over and we approve it. Anyone who does not wish to be listed can write to us at any time; we will then delete the data completely.
9. Spam protection (Cloudflare Turnstile)
Our forms are protected against automated misuse by Cloudflare Turnstile. Technical data (e.g. IP address, browser information) is transmitted to Cloudflare, Inc. (USA). The legal basis is our legitimate interest in secure forms.
10. Cookies and tracking
We always set necessary cookies (session, consent setting). We only use Google Analytics (Google Ireland Ltd./Google LLC, USA) if you consent in the cookie banner. The IP address is shortened. We use Google Consent Mode v2: without consent, no analytics or advertising cookies are set. You can change your choice at any time under .
11. Videos and map
Showreels from YouTube (in privacy-enhanced mode) or Vimeo are only loaded when you click “Play video”. Only then is data transmitted to the respective provider.
The map view in search is only loaded when you click “Show on map”. Your browser then loads map images from the OpenStreetMap Foundation (United Kingdom), and your IP address is transmitted to it. Provider locations are calculated approximately from the postcode (data: GeoNames, CC BY 4.0).
12. Emails
We send notifications and invoices via our Swiss hosting provider. For troubleshooting, we log the recipient, subject and time of each email sent (not the content) and delete this log after 90 days. You can unsubscribe from additional notifications with one click via the link in each email.
13. Retention
We delete requests, project requests and unaccepted quotes no later than 24 months after receipt. We delete account data when the account is deleted. Due to the statutory retention obligation, we keep invoice data for 10 years. Daily backups are overwritten after 14 days.
14. Your rights
You have the right to access, rectify, delete and receive your data, and the right to withdraw consent. To do so, contact support@miracreative.ch.