Back

plan-t-food.nl Privacy Policy

1. Who are we?

plan-t-food.nl is a platform for sharing recipes. We give users the ability to create, share and organize recipes into weekly menus and shopping lists.

Contact details:

2. What personal data do we collect?

Account data

  • Email address (for login and account management)
  • First and last name
  • Password (stored encrypted)

Recipe data

  • Recipe titles, descriptions and instructions
  • Ingredient lists and quantities
  • Images you upload with recipes
  • Privacy settings (public or private)
  • Tags and categories

Technical data

  • IP address (for security and session management)
  • Browser and device information
  • Login details and session information
  • Activity timestamps

3. Why do we collect this data?

Legal basis: Legitimate interest and performance of a contract

For the service to function:

  • Creating and managing your account
  • Storing and displaying recipes
  • Generating weekly menus and shopping lists
  • Enforcing privacy settings

For security:

  • Preventing fraud and abuse
  • Safeguarding account security
  • Resolving technical issues

4. How long do we keep your data?

  • Active accounts: for as long as you actively use plan-t-food.nl
  • Deleted accounts: 30 days after deletion (grace period)
  • Recipes of deleted accounts: 30 days after account deletion
  • Images: deleted when the associated recipe is deleted

5. Who do we share your data with?

We do not share your personal data with third parties, except:

Technical service providers

  • Email delivery provider (Mailgun) for verification emails, password resets and notifications
  • Hosting provider: for storing data on secure servers
  • Service providers for automatic translation and AI-assisted recipe import (recipe content only, no account data)
  • Encrypted off-site storage of backups

Public recipes

When you mark a recipe as "public", the following data is visible to other users:

  • Recipe title, description and instructions
  • Ingredient list
  • Associated images
  • Your name as the author

6. Cookies and similar technologies

Necessary cookies

  • Session cookies: to keep you logged in during your visit
  • Security cookies: for CSRF protection and security

Functional cookies (with your consent)

  • Preference cookies: to remember your settings
  • Language preference: to remember your chosen language

Statistics (without cookies)

We use a self-hosted, privacy-friendly analytics tool (Umami) to anonymously measure how the site is used. This tool does not place cookies, does not store personal data and does not track you across other websites. IP addresses are only processed briefly in anonymized (hashed) form and are not retained. All data stays on our own server.

We do not use analytical or third-party tracking cookies.

7. Your rights under the GDPR

You have the following rights regarding your personal data:

Right of access (Article 15)

You can request which data we hold about you.

Right to rectification (Article 16)

You can have incorrect data corrected via your account settings.

Right to erasure (Article 17)

You can have your account and all associated data deleted.

Right to data portability (Article 20)

You can request a copy of your data in a readable format.

Right to restriction of processing (Article 18)

You can request restriction of the processing of your data.

Right to object (Article 21)

You can object to the processing of your data.

8. How can you exercise your rights?

Via the application

  • View your data: check your account settings
  • Change your data: edit your profile and account details
  • Delete your account: use the delete function in your account

Via email

Send an email to [email protected] for:

  • Data export requests
  • Questions about your privacy
  • Complaints about data processing

9. Security of your data

We take the following security measures:

  • Passwords are stored encrypted
  • HTTPS encryption for all communication
  • Regular security updates
  • Restricted access to personal data
  • Monitoring of suspicious activity

10. Changes to this privacy policy

We may update this privacy policy.

11. Complaints

Do you have a complaint about the processing of your personal data? Please contact us first via [email protected].

You can also file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens):

  • Website: autoriteitpersoonsgegevens.nl
  • Phone: 088 - 1805 250

Contact for privacy questions:

Email: [email protected]