Skip to content
ChefStudio
es
Create account

Privacy policy

Last updated: 2026-09-28

1. Data controller

  • Controller: FalquePaws
  • Tax ID: [to be completed]
  • Address: [to be completed]
  • Data protection contact: info@falquepaws.com

2. Data we process

  • Account data: email, password (stored encrypted by our authentication provider), display name and language.
  • Content you enter: recipes, ingredients, steps, notes and tags.
  • Technical data: IP address, browser type and access logs required for the security of the service.
  • Usage data (only if you accept analytics cookies): pages visited, usage events and approximate device data, processed by Google Analytics with IP anonymisation.

3. Purposes and legal basis

  • Providing the recipe book and calculator service, managing your account and sending confirmation and password-reset emails. Legal basis: performance of a contract (Article 6(1)(b) GDPR).
  • Keeping the service secure, preventing abuse and verifying you are not a robot (captcha). Legal basis: legitimate interest (Article 6(1)(f) GDPR).
  • Analysing how the application is used in order to improve it. Legal basis: your consent (Article 6(1)(a) GDPR), which you can withdraw at any time from "Cookie settings".
  • Complying with legal obligations. Legal basis: Article 6(1)(c) GDPR.

4. Retention

We keep your data for as long as you keep your account. Recipes moved to the trash are permanently deleted after 30 days. If you delete your account, your personal data, recipes and own ingredients are erased immediately and irreversibly; ingredients already added to the global catalog are kept without any link to you. Technical logs are kept for as long as security requires, for a maximum of 12 months.

5. Recipients and processors

We do not sell or share your data. To provide the service we rely on the following providers, acting as processors:

  • Supabase, Inc. (database and authentication), with data hosted in the European Union (Ireland region).
  • Vercel, Inc. (application hosting), with server functions running in the European Union (Frankfurt). Vercel may process technical logs in the United States under the EU-US Data Privacy Framework and standard contractual clauses.
  • Resend (transactional email), with servers in the European Union.
  • Cloudflare, Inc. (Turnstile captcha), which processes minimal technical data to verify you are not a robot.
  • Google Ireland Ltd. (Google Analytics), only if you accept analytics cookies. Google may transfer data to the United States under the EU-US Data Privacy Framework.

6. Your rights

You can exercise your rights of access, rectification, erasure, objection, restriction and portability by writing toinfo@falquepaws.com. In addition, from "Settings" you can export all your data as JSON and delete your account on your own. If you believe your rights have not been respected, you can lodge a complaint with the Spanish Data Protection Agency (www.aepd.es) or your local supervisory authority.

7. Security

We apply appropriate technical and organisational measures: encryption in transit (HTTPS), passwords stored with secure derivation functions, isolation of each user's data through database security policies and access control.

8. Minors

The service is intended for people aged 14 or over. If we detect an account belonging to a younger person without authorisation, we will delete it.

9. Changes

Any changes to this policy will be published on this page with the date of the last update.