Privacy Policy

Note: This policy is a template for Löffelux and must be completed with the operator's contact details and legally reviewed before publication.

1. Controller

[Operator name / company]
[Address]
Email: [contact email]

2. Data we process

  • Account data: your email address (email sign-up) or your name and profile picture (Google sign-in). Without an account you can browse recipes; favorites, shopping list, submitting, rating and commenting require signing in.
  • Content you create: submitted recipes, uploaded images, ratings, comments, your allergies/no-gos, diet, favorites and shopping list.
  • Technical data: when the site is accessed, usual server and access data (e.g. IP address, timestamp) are processed to ensure operation and security.

3. Purposes and legal bases

We process your data to provide the app (account, recipes, personalized filters, favorites, shopping list) — the legal basis is performance of a contract (Art. 6(1)(b) GDPR). For security and abuse prevention (e.g. moderating submitted content) we rely on our legitimate interest (Art. 6(1)(f) GDPR).

4. Recipients / processors

  • Supabase — database, authentication and image storage, EU region (Frankfurt).
  • Cloudflare — delivery of the website and images (CDN), DNS.
  • Hetzner — hosting of the application server in Germany.
  • Google — only if you use "Sign in with Google" (authentication).

5. Retention and deletion

We store your data as long as your account exists. You can delete your account at any time in the app under "Profile → Delete account". This removes your account, your images and the recipes you created, as well as favorites, ratings, comments, allergies and shopping list.

6. Local storage

For functionality the app stores necessary data locally on your device: your login session, your language choice and an offline cache of your shopping list. No tracking or advertising cookies are set.

7. Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability and objection. You may also lodge a complaint with a data protection authority. Please use the contact address above.