Privacy

1. Controller

2. This website

This website does not require an account and uses no analytics tools, advertising pixels or tracking cookies. Fonts and website graphics are served by our own web server. Language is chosen through the page address; recipe and confirmation links may use your browser language. No cookie is set for this.

Technical access data such as IP address, time, requested file, browser and, where applicable, the previous page is processed to deliver and securely operate the website. The legal basis is Article 6(1)(f) GDPR. Recipe and confirmation addresses are not recorded in the website container’s access log. Shared recipe pages may load images from the original source provider, which receives the necessary connection data. External links and app stores are accessed only when opened.

3. Email contact

For email enquiries, we process your sender address and message to handle your request. The legal basis is Article 6(1)(b) GDPR for app-related enquiries or (f) for other enquiries. Our legitimate interest is responding to your message. Data is deleted when no longer needed, unless statutory retention obligations apply.

4. Account and sign-in

The app processes your email address, username and a password protected against plain-text access. Data is stored on a self-operated Supabase server. The legal basis is Article 6(1)(b) GDPR to provide your account and app features.

5. Recipes, planning and household

Recipes, images, folders, favourites, plans, shopping lists, household memberships, suggestions and votes are processed for app features (Article 6(1)(b) GDPR). Shared household content is visible to its members. A simple online status is shared within the household, without location or movement data. A shared recipe is accessible through its sharing link until you revoke sharing.

6. Recipe imports

Importing reads public source content, such as titles, descriptions, text and preview images. Prepared content is sent to Google Gemini for structuring. Your account email and password are not sent as recipe content; the source itself may contain personal data. The legal basis for the requested import is Article 6(1)(b) GDPR. External processing may take place outside the EU or EEA.

7. Push notifications

With your permission, a device token is processed via Firebase Cloud Messaging, for example for voting notifications. The legal basis is your consent (Article 6(1)(a) GDPR). You can withdraw it at any time in your device settings. Processing by the external provider may take place outside the EU or EEA.

8. In-app purchases

Cook Swipe Pro is an optional one-time purchase through the app store and RevenueCat. A pseudonymous user ID and purchase information are used to verify your entitlement (Article 6(1)(b) GDPR). Payment details remain with the app store. External processing may take place outside the EU or EEA.

9. Local storage and retention

The app stores settings and cached recipe data and images on your device. User-specific local caches are reset when you sign out. Account data is retained for as long as needed for the account and features, unless statutory retention obligations apply. You can have your account and associated data deleted in the app or by email.

10. Your rights

You have rights of access (Article 15 GDPR), rectification (Article 16), erasure (Article 17), restriction (Article 18) and data portability (Article 20). Where processing relies on legitimate interests, you may object on grounds relating to your particular situation (Article 21). You may withdraw consent for the future.

Email us to exercise your rights. You may also complain to a data protection authority, such as the State Commissioner for Data Protection in Lower Saxony, Germany.