Privacy

When you read the site

The server's log. Every request is written to it: the address asked for, the time, the answer, your IP address and the name your browser gives. It is how faults are found and abuse is stopped, which is a legitimate interest under Article 6(1)(f) of the GDPR. The log is rotated, so old lines are deleted as new ones arrive, and it is read for nothing else.

One cookie, which stops another site from sending forms here in your name. The cookie page lists it, along with the two choices kept in your own browser.

What you avoid, if you choose anything. Which allergens you avoid is information about your health, so it is kept in a cookie on your own device and nowhere else. The site reads it to leave out of each page what you asked it to, and never writes it to its database, its log or anything it sends anywhere. Choosing to avoid nothing deletes it.

Pages that fail. When a page answers with an error, the address and the kind of error are counted per day, with no IP address and nothing else about you, and the counts are deleted after 14 days. When a page breaks outright, the address, the error and a request number go to a private Discord channel so that somebody fixes it. That message carries no IP address, though an address you typed can be part of it. Discord is based in the United States, so the message leaves the European Union.

Where it is kept

The site and its database run on servers hosted by OVHcloud, in the European Union. The database holds nothing about the people reading the site. It is copied every night to separate storage, and each copy is deleted after 30 days.

Your rights

You can ask for a copy of what is kept about you, for it to be corrected or deleted, for its use to be limited, and you can object to it. You can also complain to the Romanian data protection authority, ANSPDCP.

Changes

This page changes before the site does anything new with anybody's data, and the date at the top says when it last changed.