This notice covers caod.ch and the public CAOD sites (apps, docs, and status). An individual app may have its own notice.
CAOD is infrastructure operated by Tidalux Ltd, a UK company.
What this site does
These pages are static. There is no account on caod.ch, no advertising, and no analytics. We do not set tracking cookies, so there is no cookie banner. We do not load third-party scripts, fonts, or tags.
Where it runs
Public websites are served from a Tidalux server in Gravelines, France. Home machines are not on the public internet. Public SSH on that server is closed.
Mail and files
These are three different paths. Day-to-day mail for client domains stays with the UK platform that hosts those sites. Sensitive mail on tidalux.io is Proton. Mail for caod.ch is Tuta, and those notes expire. None of that mail runs on the web server.
Client files that are not the live site are kept in Cryptomator vaults (AES-256-GCM for contents, AES-SIV for names) on Proton Drive and on offline encrypted drives. We cannot recover a lost vault password.
The longer note is How we keep it.
What stays on your device
If you set light or dark colour on the landing page, that choice is stored only in your browser (localStorage key caod-theme). It is not sent to us. Clearing site data removes it. The page does not use cookies for that preference.
Team sign-in sets one HttpOnly cookie (caod_team) so you stay signed in across CAOD hosts. It is not used for advertising. Signing out clears it.
Logs
The web server keeps ordinary connection logs, such as IP address, time, and the page requested, so we can run and secure the service. We keep them only as long as needed for operations and security, then rotate or delete them. We do not sell that data, and we do not use it to build advertising profiles.
Apps
An app on apps.caod.ch may store data on your device, or describe its own practices. TapYes: privacy notice.
Contact
Questions: con@caod.ch