← Roomproof

Privacy

This is the English version of our privacy notice. The German version at raumcheck.ch/datenschutz says the same; both sites run on the same service. If the two ever differ, the German one applies.

Who processes your data

Bircher products, Unterer Haldenweg 20, 5600 Lenzburg, Switzerland, reachable at info@raumcheck.ch.

What is processed

• Uploaded floor plans. The PDF is stored on the server because the wall lines are read from it and the scaled export is produced from it later.
• Rooms you draw. The measurements you enter.
• Furniture lists. What was taken over from a file or pasted text.
• Layouts. Where the furniture stands, including saved variants.
• Server log. Time and type of access.
• Account, if you create one. E-mail address and a password that is stored only as a non-reversible hash. An account is optional and answers exactly one question: which plans are mine. Who may open a plan is still decided by the link alone.
• Payment, if you unlock the export. The payment itself runs at Stripe, not with us. We never see card data.
• Suggestions, if you send us one. The tool has a field for this at the top right. We store what you write and the e-mail address if you give one. The address is optional and only used to reply. Your plan's identifier is not sent along.
• AI assistants (MCP). If you use Roomproof from Claude, ChatGPT or another assistant, that assistant sends us the room measurements, furniture and instructions it derives from your conversation. We do not receive your conversation itself, your assistant account or your name. What the assistant's provider stores is governed by that provider's own privacy notice.

What does not happen

• No third-party analytics, no session recording, no ad network reading along. No third-party script is loaded, not even from Google. The one exception in the data: if you arrive via a Google ad and later buy, that purchase is reported back to Google. Exactly what is passed on is described below under "If you arrive via an ad".
• No plans or furniture data are passed to third parties.
• No language model on our side, except when you explicitly ask for a layout draft (see "If you let the AI furnish an area"). Assistants that call our MCP tools run in your own account with their provider.

What we count ourselves

To know where the tool gets stuck, we count individual steps on our own server: that a page was opened, that a plan arrived, that the scale was set, that an export was triggered. We also record which website someone came from.

• No cookie is set and no identifier is stored on your device for this count. Two cookies exist nonetheless, each only in one specific case: the one after an ad click, see below, and this one. Only on explicit request: opening the site with ?ich=1 sets a cookie that means nothing but "do not count". It contains the digit 1, cannot recognise anyone, and ?ich=aus deletes it. We use it for our own visits so that the count does not read our work as demand.
• Neither your IP address nor your browser string is stored. Both are reduced to a short hash that is regenerated daily. The next day the same visit cannot be recognised, not even by us.
• No floor plan, file name, project name or project identifier enters this count. Measurements are stored rounded.
• From the browser string and language setting we derive three coarse values and store only those: device category (phone, tablet or computer), language (German, French, Italian, English or other) and country from the language setting (Switzerland, Germany, Austria, France, Italy, United Kingdom, USA, other or none). These are fixed short lists, not free text.
• You can object to the count. A message to the address below is enough.

Clicks and reading depth

We also count where on a page a click happened and how far down someone read. This answers what the step count leaves open: whether a button is found at all and whether a sentence far down was ever read.

• Click position is stored as a percentage of the page area, in steps of two, not in pixels. Your window size is not stored.
• The click is stored, never the path to it. No mouse trail, no session recording, no replay.
• No keyboard input. What you type never leaves your device through this count.
• Of the clicked element we store no label and no name, only a role from a fixed list, such as "start" or "read more". A click that hits nothing is counted as "nothing".
• Of the reading depth only the deepest point reached is stored, once per visit, in tenths.
• The same daily hash applies: the next day the visit cannot be recognised.

If you arrive via an ad

Roomproof may be advertised through Google Ads. If you arrive via such an ad, the address carries a click identifier assigned by Google, for example ?gclid=…. It lets us report back later that this click turned into a purchase.

• One cookie, and only after an ad click. It is called rc_werbung, contains only the identifier Google already knows, and lasts 90 days.
• Still no third-party script. Our own server reads the identifier from the address. No Google tag, no tag manager, no analytics tool runs on this site.
• Only the purchase is reported back, with identifier, time and amount. Not your floor plan, your furniture, your e-mail address or any page you visited.
• No profile, no cross-site recognition.
• If you do not want this, open the site without the parameter or delete the cookie. The tool works the same either way.

Who else is involved

Five service providers, no more. Each gets only what it needs for its task:

• Hetzner Online GmbH runs the server where everything is stored.
• Stripe handles payment when you unlock an export. Stripe receives your payment details and e-mail address, but neither your floor plan nor your furniture. We in turn never see your card data.
• Infomaniak sends the purchase confirmation. Your e-mail address passes through their mailbox for that.
• Google Ireland Limited, but only if you arrived via a Google ad. The click identifier with time and amount of the purchase goes back, see above. Google also processes this in the USA.
• Anthropic, but only if you let the AI furnish an area. What is passed on is described in the next section. Anthropic processes this in the USA.

If you let the AI furnish an area

The "furnish this area" button sends a request to a language model by Anthropic. This is the only operation in which something from your plan leaves the house, so here is exactly what.

Passed on:

• The outline of the area you drew, as measurements in metres.
• The areas you blocked and the swing areas of your doors.
• The furniture already placed on the area, with its dimensions.
• The sentence you wrote yourself.

Not passed on: your floor plan as a file or image, your project name, the project identifier, your name, your e-mail address and everything else in your plan.

Your sentence is sent as you wrote it. Do not put anything in it that is nobody's business; what should go on the area is enough.

Anthropic states that it does not use API data to train its models. For retention, what Anthropic writes in its own privacy notice applies; we deliberately give no period here that we cannot enforce ourselves. On our side we store, per draft, only how many pieces of furniture resulted and what it cost.

Automated replies

Routine questions sent to info@raumcheck.ch may be answered by an AI assistant. Such replies are marked as automated. Questions about payments, refunds or your rights are always answered by a person.

How long

Projects stay until you delete them. There is no automatic deletion after a set time, and we deliberately write no period here that the system does not enforce. If you want your project or account deleted, write to the address below.

Suggestions stay until we delete them by hand. Same rule: no automatic period.

Click identifiers from ads are deleted after 90 days.

Counted steps are deleted after 400 days. The web server's access log contains only truncated IP addresses (178.197.12.34 becomes 178.197.12.0) and is overwritten after 14 days.

Where

On a server in Nuremberg, Germany, at Hetzner Online GmbH. Germany is in the EEA and has a level of data protection that the Swiss Federal Council recognises as adequate.

Your rights

Under the revised Swiss Data Protection Act, and under the GDPR where it applies, you are entitled to access, rectification, erasure and portability of your data. A message to info@raumcheck.ch is enough.

Purchases and withdrawal

The PDF export is digital content delivered immediately. Before checkout you tick a box agreeing to immediate delivery and acknowledging that you thereby lose the 14-day right of withdrawal. We record the time of that consent. If something does not work, write to us anyway; we would rather refund than argue.

Imprint · Updated 10 November 2026