Privacy Policy

1. Data Protection at a Glance

General Information

The following notes provide a simple overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to personally identify you.

Data Collection on this Website

Who is responsible for data collection on this website?

Data processing on this website is carried out by the website operator. You can find their contact details in the legal notice of this website.

How do we collect your data?

Your data is collected on the one hand by you providing it to us. This may, for example, be data that you enter during registration or when creating recipes. Other data is collected automatically or after your consent when you visit the website by our IT systems. This is mainly technical data (e.g. internet browser, operating system, or time of page access).

What do we use your data for?

Some of the data is collected to ensure error-free provision of the website. Other data may be used to analyze your user behavior in order to improve the website.

What rights do you have regarding your data?

You have the right at any time to receive information free of charge about the origin, recipient, and purpose of your stored personal data. You also have the right to request the correction or deletion of this data.

2. Hosting and Content Delivery Networks (CDN)

Vercel

We host our website with Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA. Vercel automatically collects data about your visit in so-called server log files. These are:

• IP address
• Browser type and browser version
• Operating system used
• Referrer URL
• Hostname of the accessing computer
• Time of server request

Data processing is based on Art. 6 para. 1 lit. f GDPR (legitimate interest). Our legitimate interest lies in the provision, optimization, and security of our website. For more information, see Vercel's privacy policy: https://vercel.com/legal/privacy-policy

Uploadcare

For hosting and processing images, we use Uploadcare, a service of Uploadcare LLC, 2711 Centerville Rd, Suite 400, Wilmington, DE 19808, USA. When you upload images (e.g., recipe images), they are stored and processed on Uploadcare's servers. The following data is collected:

• Uploaded image files
• Image metadata (e.g., file size, format)
• Upload timestamp
• IP address

Data processing is based on Art. 6 para. 1 lit. b GDPR (contract fulfillment) and Art. 6 para. 1 lit. f GDPR (legitimate interest). For more information: https://uploadcare.com/privacy-policy/

3. General Information and Mandatory Information

Data Protection

The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with legal data protection regulations and this privacy policy.

Note on the Responsible Party

The party responsible for data processing on this website is:

Storage Duration

Unless a more specific storage period has been specified within this privacy policy, your personal data will remain with us until the purpose for data processing ceases to apply. If you assert a legitimate request for deletion or revoke consent for data processing, your data will be deleted unless we have other legally permissible reasons for storing your personal data.

Your Rights

You have the right at any time to:

• Obtain information about your personal data stored by us and its processing (Art. 15 GDPR)
• Request correction of inaccurate personal data (Art. 16 GDPR)
• Request deletion of your personal data stored by us (Art. 17 GDPR)
• Request restriction of processing of your personal data (Art. 18 GDPR)
• Object to the processing of your personal data (Art. 21 GDPR)
• Request data portability (Art. 20 GDPR)
• Revoke consent given for data processing (Art. 7 para. 3 GDPR)
• Lodge a complaint with a supervisory authority (Art. 77 GDPR)

Right to Object

If your personal data is processed on the basis of legitimate interests in accordance with Art. 6 para. 1 lit. f GDPR, you have the right to object to the processing of your personal data in accordance with Art. 21 GDPR, provided there are reasons arising from your particular situation.

SSL/TLS Encryption

For security reasons and to protect the transmission of confidential content, this site uses SSL or TLS encryption. You can recognize an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line.

4. Data Collection on this Website

Cookies

Our website uses cookies. Cookies are small text files that are stored on your device and cause no damage. They are either stored temporarily for the duration of a session (session cookies) or permanently (permanent cookies) on your device. Session cookies are automatically deleted after your visit. Permanent cookies remain stored on your device until you delete them yourself or until they are automatically deleted by your web browser.

We use the following cookies:

The use of necessary cookies is based on Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in the technical functionality of the website and the provision of a secure login system.

You can set your browser to inform you about the setting of cookies and only allow cookies on a case-by-case basis, exclude the acceptance of cookies for certain cases or in general, and activate the automatic deletion of cookies when closing the browser.

Registration and User Account

You can create a user account on our website. The following data is collected during registration:

• Name
• Email address
• Profile picture (optional)
• Registration timestamp

Processing is based on Art. 6 para. 1 lit. b GDPR for fulfillment of the usage contract. The data will be deleted as soon as you delete your account, unless there are statutory retention obligations.

Contact Form

If you send us inquiries via the contact form, your details from the inquiry form, including the contact data you provided there, will be stored by us for the purpose of processing the inquiry and in case of follow-up questions. We do not pass on this data without your consent. Processing is based on Art. 6 para. 1 lit. b GDPR.

5. Authentication

Better Auth

For managing user accounts and authentication, we use Better Auth. The following data is processed:

• Email address
• Password (stored encrypted)
• Login timestamps
• Session tokens
• IP address (for security purposes)

Data processing is based on Art. 6 para. 1 lit. b GDPR (contract fulfillment) and Art. 6 para. 1 lit. f GDPR (legitimate interest in authentication security).

6. Database

Supabase

We use Supabase (Supabase Inc., 970 Toa Payoh North, Singapore 318992) as our database service provider. The following data is stored in the database:

• User data (name, email, profile picture)
• Recipe data (title, ingredients, instructions, images)
• User preferences and settings
• Metadata (creation and modification timestamps)

The servers are located in the EU. Data processing is based on Art. 6 para. 1 lit. b GDPR (contract fulfillment) and Art. 6 para. 1 lit. f GDPR (legitimate interest). For more information: https://supabase.com/privacy

7. Email Delivery

Resend

For sending transactional emails (e.g., registration confirmations, password reset), we use Resend (Resend Labs Inc., 2261 Market Street #4667, San Francisco, CA 94114, USA). The following data is transmitted to Resend:

• Recipient's email address
• Recipient's name (if provided)
• Email content
• Timestamp

Data processing is based on Art. 6 para. 1 lit. b GDPR (contract fulfillment) and Art. 6 para. 1 lit. f GDPR (legitimate interest in reliable email delivery). We have agreed on standard contractual clauses for transmission to the USA. For more information: https://resend.com/legal/privacy-policy

8. Analytics and Advertising

Vercel Analytics

This website uses Vercel Analytics to analyze user behavior. Vercel Analytics collects the following data:

• Page views
• Time spent on site
• Device type and browser
• Geographic origin (country level)
• Referrer source

Vercel Analytics works completely anonymously and does not store IP addresses or personal data. No cookies are set. Data processing is based on Art. 6 para. 1 lit. f GDPR (legitimate interest in analyzing and optimizing the website). For more information: https://vercel.com/docs/analytics/privacy-policy

Vercel Speed Insights

To measure and improve website performance, we use Vercel Speed Insights. This service collects anonymized performance metrics such as loading times and Core Web Vitals. No personal data is collected and no cookies are set. Data processing is based on Art. 6 para. 1 lit. f GDPR.

9. Data Transfer to Third Countries

Some of the services we use are based in the USA or process data in the USA (Vercel, Uploadcare, Resend). The transfer of personal data to the USA is based on the EU Commission's standard contractual clauses (Art. 46 para. 2 lit. c GDPR) as well as additional technical and organizational measures to ensure an adequate level of data protection.

10. Your Rights to Deletion and Correction

You can delete your user account at any time via the account settings. All your personal data and all recipes you have created will be permanently deleted. Alternatively, you can contact us by email to initiate the deletion.

Please note that backups may be retained for up to 30 days. After this period, this data is also completely deleted.

11. Changes to this Privacy Policy

We reserve the right to adapt this privacy policy in order to adjust it to changed legal situations or in the event of changes to our service and data processing. The current version is always available on this page.