Privacy policy
Last updated: October 2026.
Controller
The data controller is the person or entity that operates this site. Contact for privacy matters: the email published by the controller on this page.
Data we collect
- Account: username, email and password (stored only as an Argon2id hash).
- Optional profile: display name, country and bio.
- Content: recipes, photos (without metadata or GPS location), comments, favorites and follows.
- Security: event log (logins, account changes) with the IP address pseudonymized through a hash.
Purpose and legal basis
To provide the service you request when you sign up (performance of a contract, art. 6.1.b GDPR) and to protect the platform against abuse (legitimate interest, art. 6.1.f). We do not sell data or show advertising.
Cookies
We only use strictly necessary technical cookies (the session and, while you set up two-step verification, a temporary cookie). There are no analytics or third-party cookies, so we do not show a consent banner. The language preference is only part of the address (URL), and the dismissed language notice is remembered in your browser.
Third parties
The map is loaded from OpenFreeMap (tiles.openfreemap.org), which receives your IP address to serve the map images. Recipe translation happens in your own browser; only if you choose “Translate with Google” is the page opened on that external service.
Retention
Account data is kept as long as the account exists. When you delete it, your profile, comments, favorites and follows are erased. Published recipes remain in the archive anonymously, because they are part of the shared heritage under the CC BY-SA license. You can edit them or ask for their removal before deleting your account.
Your rights
You can access and download your data from Settings → Privacy, correct it from your profile and delete your account at any time. You can also object to or restrict processing and lodge a complaint with the supervisory authority (in Spain, the AEPD).