Privacy Policy

Last updated: 2 October 2026

This site collects a small amount of visit data so we can show accurate visitor numbers to potential sponsors. This page explains exactly what is collected, why, and for how long. The site has no user accounts: we never ask for your name, email address or password.

Who is responsible

This website is run by Maria Letizia Fasci, who is responsible for the data described here (the "data controller" under the GDPR). You can reach us at letizia.fasc@gmail.com.

What we collect

The page you viewed and the date and time of the visit.
Your approximate country, derived from your IP address at the moment of the request, using a database stored on our own server, so your IP address isn't sent to anyone for this lookup. We do not store your IP address itself.
If you accept cookies: a random, anonymous identifier stored in a cookie on your device, so we can count returning visitors instead of counting the same person as several different visitors.
If you choose "Anonymous only" (or don't choose): nothing beyond the page and the country. We don't store any identifier or fingerprint, so we can't tell whether two visits came from the same person, even on the same day.
If you use the meal planners: the recipes and portions you pick, kept with your session (see sessionid below) so your plan and shopping list are still there when you come back.

Why, and on what legal basis

Returning-visitor identifier (visitor_id): only with your consent (GDPR art. 6(1)(a)), given with "Accept". You can withdraw it at any time.
Anonymous page views and country: our legitimate interest in showing sponsors how many people use the site (art. 6(1)(f)), using the least data possible: no identifier on your device, no fingerprint, no IP address stored. Your IP address is used only for the moment of the request: for the country lookup and, kept in memory for at most a day as a one-way code, to stop automated floods of requests.
Meal planner and security cookies: needed to provide what you ask for and to keep the site secure (art. 6(1)(b) and (f)).
Admin login protection: if anyone tries to log in to the site's administration, their IP address and browser are recorded to block password-guessing: failed attempts for up to 1 hour, successful logins for 90 days (art. 6(1)(f)). Ordinary visitors never reach this page.

What we never collect

Your name, email address, or any account information.
Your precise location — only your country.
Anything sold, or shared with advertising networks or data brokers.

How long we keep it

Individual visitor identifiers are deleted after 13 months of inactivity. Aggregated statistics (page views and countries, with any identifier removed) are kept for up to 25 months to show trends to sponsors, after which they are deleted. Meal-planner sessions expire after 2 weeks and are then deleted.

Your choice

You can choose "Anonymous only" on the cookie banner to be counted only as anonymous page views, with no visitor identifier stored on your device (only a cookie that remembers your choice). You can change your choice at any time with the buttons shown at the bottom of this page, which is always linked from the footer of every page. Choosing "Anonymous only" also deletes the identifier we stored for you.

Your rights

Under the GDPR you can ask to access, correct or delete your data, object to its use, or withdraw your consent by writing to letizia.fasc@gmail.com. Because we collect no names or contact details, we can usually only find data linked to your visitor_id cookie; choosing "Anonymous only" deletes it straight away, and the anonymous statistics can't be traced back to you at all.

You can also complain to a data protection authority. In Sweden that is the Swedish Authority for Privacy Protection (IMY), www.imy.se.

Service providers

Like any website, this one relies on a few providers that necessarily see your IP address and the pages you request, only to deliver their service to us:

Render hosts the website and its database.
Cloudflare is the network in front of Render that delivers the pages to you.
Cloudinary stores the recipe photos; your browser loads them directly from Cloudinary.

Everything else, including the page styling and scripts, is served from our own site. These providers are based in the United States and may process data outside the EU. Render (and Cloudflare, which works for Render) does so under Render's data processing agreement, which includes the EU's standard contractual clauses. Cloudinary only receives the requests for the photos and transfers data under the EU–US Data Privacy Framework.

Cookies

Cookie	Purpose	Kept for
`sessionid`	Remembers your meal-planner recipes and shopping lists. Set only when you use a planner.	2 weeks
`csrftoken`	Security: protects the site's forms against forged requests from other websites.	1 year
`analytics_consent`	Remembers your choice on the cookie banner.	13 months
`visitor_id`	Only if you click "Accept": the anonymous identifier described above.	13 months

The first three are needed for the site to work and don't identify you; visitor_id is the only one that depends on your choice.

Changes to this policy

If this policy changes, the new version is published here with a new "Last updated" date.

This product includes GeoLite Data created by MaxMind, available from https://www.maxmind.com.