Privacy notice
Draft text: this page is not final until the business details are filled in and a legal review is completed. Values in square brackets must be replaced before launch.
This is a draft notice describing how personal data is handled on Panfold, operated by [Legal entity]. Controller details: [Legal name], [Address], [Contact e-mail], [Company registration number].
What we process
- Contact form: your name, e-mail address, subject and message.
- Security: to limit abuse we keep a short lived, irreversible digest of the IP address that rotates daily. The raw IP address is not stored.
- Staff accounts: for editors and admins only, an e-mail address, a display name, an irreversible password hash and session records. Visitors do not create accounts.
What stays on your device
Saved recipes, the ingredients you tick off, the steps you complete and the serving size you choose are stored in your browser (localStorage) only. They are never sent to the server.
Purposes and legal bases
[To be completed with a legal review: contract performance, legitimate interest (security), and any consent based processing.]
Retention
Contact messages and audit logs are deleted according to the retention settings in the admin panel (defaults: contact messages 365 days, audit logs 730 days). Rate limit counters are deleted within minutes. [Final periods to be confirmed by a legal review.]
Processors and transfers
[Hosting, e-mail and storage providers, their regions and any international transfers to be listed before launch.]
Your rights
Use the contact form for any request about your data. [Add the formal request procedure required by your jurisdiction.]