Privacy policy

The controller of your personal data is the owner of the MyRecipeDrawer app, available at myrecipedrawer.com. For any matter concerning your personal data, you can get in touch by email: tata.trojki@gmail.com

When you use the app, we process the following data:

• Email address and name — provided when you register an account
• Recipe data — the text, photos, categories, and sources you add
• Shopping list — the items you add
• Session data — a session identifier stored in a cookie after you log in

Your data is processed solely to provide the service, that is, to let you use your personal recipe collection. The legal basis is the performance of a contract (Article 6(1)(b) GDPR) that you entered into when you created your account.

We do not pass your personal data on to third parties and we do not use it for marketing purposes.

The app uses only a session cookie (a technical cookie), which is necessary for logging in to work. Without it, the app cannot identify a logged-in user. The cookie is deleted when you log out, or expires after 30 days of inactivity.

We do not use tracking, analytics, or advertising cookies.

We keep your data for as long as your account exists. When the account is deleted, all related data (recipes, shopping list, categories) is permanently deleted from the database. Server backups are deleted automatically according to the retention schedule (30 days at most).

Under the GDPR, you have the following rights:

• Access — you can ask what data we hold about you
• Rectification — you can correct your name in your account settings
• Erasure — you can ask for your account and all your data to be deleted
• Data portability — you can ask for a copy of your data in JSON format
• Complaint — you have the right to lodge a complaint with the President of the Personal Data Protection Office in Poland (Prezes UODO, uodo.gov.pl)

To exercise any of these rights, write to tata.trojki@gmail.com

The app runs over an encrypted HTTPS connection. Passwords are stored only in hashed form — we have no access to your password in plain text. Only the app administrator and the database server have access to the data.