🛡️ Privacy Policy

We’re glad you’re using our recipe book. Here we explain in plain words what data we process, why we do it and what rights you have.

Controller

The controller responsible for processing your data on this website is:

Bennet Seibt
Theodor-Storm-Str. 21
73529 Straßdorf
📧 [email protected]

The essentials at a glance

We only process the data needed to run the recipe book: your account, your recipes and – only if you provide them voluntarily – your allergy notes. There is no advertising tracking and no sharing of your data for advertising purposes.

Account and sign-in

For an account we store your username, your email address, your password (only as an encrypted hash, never in plain text) and the language you choose. To confirm your email address and to reset your password we send emails to that address. Legal bases: performance of a contract (Art. 6(1)(b) GDPR) and our legitimate interest in secure, abuse-free operation (Art. 6(1)(f) GDPR).

Recipes and content

We store your recipes (title, ingredients, instructions, notes, images, source, rating) so you can find, share, print and export them. Recipes you mark as public are visible to all visitors, even without signing in. If you delete a recipe or your account, we remove the related content. Legal basis: performance of a contract (Art. 6(1)(b) GDPR); for publishing, your consent (Art. 6(1)(a) GDPR).

Allergy notes (voluntary)

In your profile you can voluntarily select allergies and intolerances. They help us warn you when creating and adapting recipes and suggest suitable alternatives. As this is health-related information, we process it only on the basis of your explicit consent (Art. 9(2)(a) GDPR). You can change or remove this information in your profile at any time.

AI features

Some features use AI support (recipe suggestions, translations, cover images). For this we transmit the recipe texts you enter to our AI service, which runs on our own server in Germany. AI-generated cover images are labelled “AI created”. No automated decision-making with legal effect takes place (Art. 22 GDPR).

Cookies

We only use the following two technically necessary cookies. They do not require consent (§ 25(2) No. 2 TDDDG) – which is why there is no cookie banner here:

Name	Purpose	Storage period	Type
session	Secure sign-in and protection of forms against outside access (CSRF protection); contains the session identifier.	Until you close the browser; up to 30 days after signing in	Strictly necessary
lang	Stores the language you selected (German, English, Spanish, French).	12 months	Strictly necessary

The “session” cookie is only created when you open a form or sign in; the “lang” cookie only when you select a language yourself. Both are set by us (no third parties), are not used for advertising or analytics and are not shared with third parties. There are no cookies or similar storage that require consent.

Hosting and server logs

The website runs on a server of netcup GmbH (data centre Nuremberg, Germany, EU). The provider processes the connection data technically required for this on our behalf. Legal basis: legitimate interest in secure and stable operation (Art. 6(1)(f) GDPR).

When you visit the pages, technical server log data is generated (IP address, time, page accessed, browser identifier). We use it exclusively for troubleshooting and to defend against attacks, and we delete it regularly.

Cloudflare (DNS and proxy)

Our domain is operated via Cloudflare’s network (Cloudflare, Inc., USA). Requests pass through Cloudflare’s servers so that the site is fast and protected against attacks; your IP address is also technically processed in the process. Transfers to the USA are safeguarded by the EU Standard Contractual Clauses or the EU-US Data Privacy Framework. Legal basis: legitimate interest in security and performance (Art. 6(1)(f) GDPR).

Email delivery

We send confirmation, activation and password emails via our own mail server under the domain mynomnombook.com. We process the data required for this (email address, time of sending) to perform the contract and to keep your account secure (Art. 6(1)(b) and (f) GDPR). No data is passed on to third parties for advertising purposes.

Disclosure of data

We do not sell your data and do not share it for advertising purposes. Only we and the service providers mentioned above (hosting, Cloudflare) have access to your data. Recipes that you mark as public are visible to other visitors.

Storage period

We store your data for as long as your account exists. You can delete your account yourself at any time (Account → Settings); we then remove your personal data and your recipes. Statutory retention obligations or technical backups may require individual data to be kept for a short additional period; server logs are kept only briefly.

Your rights

You have the following rights regarding your personal data at any time:

• Access to the data stored about you (Art. 15 GDPR)
• Rectification of inaccurate data (Art. 16 GDPR)
• Erasure (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Objection to processing (Art. 21 GDPR)

You can withdraw consents (e.g. for allergy notes) at any time with effect for the future; the lawfulness of the processing carried out until then remains unaffected. For all questions and requests, an email to the address above is enough.

Right to lodge a complaint

If you believe that we are processing your data unlawfully, you can lodge a complaint with a data protection supervisory authority. The authority responsible for us is the State Commissioner for Data Protection and Freedom of Information Baden-Württemberg, Lautenschlagerstraße 20, 70173 Stuttgart, Germany (www.baden-wuerttemberg.datenschutz.de).

Last updated: September 2026