Privacy policy

Who is responsible

Tofumelo (tofumelo.pt) is responsible for the data described here. For any question or request about your data, write to geral@tofumelo.pt.

What we keep and what for

• Account: your e-mail, your password (only encrypted, we never see it), your language and the dates you created the account and confirmed your e-mail; the recipes you save as favourites and your Meal Prep plan (meals, your own meals and shopping list). They are there so you have an account and see what you saved on any device.
• Newsletter: your e-mail, language and the date you confirmed. Only used to send you new recipes, and only after you confirm through the e-mail we send you.
• Recipes you send us: your name, your e-mail if you give it, the recipe and the photo. Used to review it and, if we publish it, your name shows on it when you choose to be credited.
• Security: to stop repeated attempts (logging in, creating an account, asking for a new password, subscribing to the newsletter, sending recipes) we keep an encrypted summary of the IP address or of the e-mail tried, which doesn't tell which it was.
• Searches with no results: what was searched on the home page without finding recipes, so we know which recipes to make. Nothing about who searched is kept.
• Statistics: we count visits with Vercel Web Analytics and Speed Insights, without cookies and without identifying who visits.
• Meal Prep totals: we only see numbers added up over all plans (for example, which recipes are in the most plans). Of the names you give your own meals, we only see those at least three people use, as ideas for snacks and recipes, and never who wrote them.

On what grounds

• The account, favourites and Meal Prep: to provide the service you asked for when creating the account.
• The newsletter and recipes you send: your consent, which you can withdraw any time.
• Security and statistics: our legitimate interest in keeping the site working and safe from abuse.
• Meal Prep totals: our legitimate interest in improving the site, always without knowing whose plan is whose.

Cookies and what stays in your browser

We use a single cookie, «tofumelo-session», and only when you log in: it tells the site it's you. It is needed for the account to work, so we don't ask for consent. It lasts up to 90 days, or until you log out.

Your browser's storage (which never reaches us) keeps: the light or dark theme, where you were in cooking mode, the draft of the recipe form and the Meal Prep plan of those without an account.

We use no advertising or tracking cookies.

Who handles data for us

• Vercel: hosts the site and the photos, and does the statistics.
• Neon: keeps the database, in the European Union (Frankfurt).
• Resend: sends the e-mails (account confirmation, new password, newsletter).
• Groq: translates into English the text of the recipes we publish. It gets no data about you.

Some of these services are US companies and may handle data outside the European Union, with the safeguards the GDPR requires for it. We give your data to no one else.

For how long

• Your account and what you saved in it: until you delete the account.
• Sessions: up to 90 days. Confirmation links last 7 days, and new password links 1 hour.
• Attempts to log in or create an account: 1 day.
• The newsletter: until you unsubscribe. A request you don't confirm is deleted after 30 days.
• Recipes you send: as long as we need them to review and publish them, or until you ask us to delete them.

Your rights

You can ask to see, correct or delete your data, to get a copy of it, or object to us handling it. You delete your account and everything in it yourself, in «My area → Account settings». You unsubscribe from the newsletter with the link in any e-mail we send. For anything else, write to geral@tofumelo.pt.

If you think we don't handle your data well, you can complain to the Portuguese data protection authority, the CNPD (cnpd.pt).

Changes

If we change what we do with your data, we update this page and the date at the top.