Privacy

Last updated 5 September 2026

This is the private portal where I share documents with my coaching clients. It is not a public service: every portal exists because I made it for one person, and this page describes exactly what it holds about that person.

Who is responsible

Francisco Baptista, executive coach, Lausanne, Canton of Vaud, Switzerland. I am the controller of everything described here, and there is no one else behind it. Write to me at the address we already correspond on.

What this site holds about you

• Your name and email address. Both are encrypted before they are stored, so the database on its own does not say who my clients are.
• Your link and your PIN. The link is stored hashed and encrypted, never as readable text. The PIN is stored only as a one-way hash — I cannot read it back, which is why a forgotten PIN can only be replaced, never recovered.
• The documents in your portal, and what I have written about each one to introduce it to you.
• A record of use: each time the portal is opened, a document is viewed or downloaded, and each attempt at the PIN. Each entry keeps the time, and for a while your IP address and the identification your browser sends.

How long it is kept

IP addresses and browser identification are erased after 180 days. The entries themselves remain — so the counts stay honest — but they lose the part that could say where you were and on what. Everything else stays until you ask me to delete it, or until our work ends and I remove your portal.

Who else sees it

• Cloudflare R2 stores the documents themselves.
• Railway runs the site and its database.
• Resend delivers the two messages that carry your link and your PIN, when I send them from here rather than by hand.
• My own practice systems receive which documents have been opened and when, linked to you by an opaque identifier rather than by your name. The filenames of documents marked confidential — an assessment report, say — are withheld from that entirely.
• An alerting endpoint I control receives a message when something here fails in a way that needs my attention. Those messages can contain the name of the file involved, which is why the endpoint is a private one and never a shared channel.

No one else. There is no advertising, no analytics service, no tracking pixel, and nothing here is sold, rented or shared.

Cookies

Two, and both are strictly necessary: one keeps you signed in for thirty days, and one records that you confirmed your PIN within the last ten minutes so that a confidential document will open. Nothing else is stored on your device. Because neither is optional to the service, there is no consent banner here to click away.

How it is protected

Your link is long and unguessable, and it is not enough on its own — the PIN is a second, separate secret, which is why the two are sent as two separate messages and never together. Documents I have marked confidential need the PIN confirmed again before they will open, even during a signed-in session. Names, email addresses and links are encrypted where they are stored.

Your rights

Under the Swiss Federal Act on Data Protection — and under the GDPR if you are in the EU — you may ask what I hold about you, ask me to correct it, ask for a copy, or ask me to erase it. Write to me and I will do it; there is no form and no process to go through. You may also complain to the Federal Data Protection and Information Commissioner, or to your own supervisory authority in the EU.

Erasure you can also do yourself, without asking me: at the foot of your portal, Delete everything removes it — the documents, the record of your visits, your name and address, and the link itself. It takes effect immediately, and neither of us can undo it afterwards.

Erasure reaches everything described on this page. It does not reach the working copies and professional records I keep outside this portal, which my obligations as a coach require me to hold, nor messages already delivered to your inbox, nor anything you have already downloaded.

Changes

If what this site does changes, this page changes with it, and the date at the top moves. I will tell you directly if a change matters.