Privacy Policy
How we collect, use, and protect your personal data. GDPR-compliant by design.
Overview
FoodPecker respects your privacy. We collect only the minimum data needed to provide our meal-planning service, and we never sell your personal data to third parties. This page explains exactly what we collect, why, and how to exercise your rights.
What Data We Collect
We split data into two categories: essential (required to use the service) and analytics (optional, with your consent).
Essential data (always processed)
Email address and password (hashed with bcrypt) for authentication; your meal plan, shopping list, banned ingredients, household size, cooking preferences, and locale preference stored in our database. Authentication uses an HTTP-only secure cookie. This data is necessary to provide the service and is stored on our servers in the EU/US regions used by our hosting provider.
Analytics data (only with your consent)
When you grant analytics consent, Google Analytics 4 (GA4) processes anonymized IP addresses, page views, referrer, device type, and country. We have configured GA4 with "ads_data_redaction" on and "ad_storage", "ad_user_data", and "ad_personalization" all denied. GA4 will not use your data for advertising, remarketing, or personalized ads.
We never sell your data
We do not sell, rent, trade, or share your personal data with advertising networks, data brokers, or marketing partners. We do not use tracking pixels from Facebook, TikTok, or similar platforms.
Google Analytics 4
We use Google Analytics 4 (measurement ID G-JW8S6DFPY1) only after you grant consent through the cookie banner. The script is loaded from googletagmanager.com and reports to google-analytics.com. Google LLC acts as a data processor under the EU Standard Contractual Clauses. You can read Google's privacy policy at policies.google.com/privacy. To exercise your right to object, simply reject analytics in the cookie banner or click the button below.
Data Retention
Essential account data is retained while your account is active. If you delete your account, we erase your personal data within 30 days. Analytics data is retained by Google for up to 14 months and is then automatically deleted per GA4 default settings. Your cookie consent record is stored for 12 months, after which we will ask you again.
Your Rights (GDPR & CCPA)
You have the right to access, correct, delete, export, and restrict the processing of your personal data. You may also withdraw consent at any time. To exercise any of these rights, email privacy@food-pecker.com — we respond within 30 days. If you are an EEA resident and believe we have not handled your request properly, you may lodge a complaint with your local data protection authority.
Contact
For privacy questions or to exercise your rights: privacy@food-pecker.com. For support: visit our About page.
Manage your cookie consent
You can change or revoke your analytics consent at any time. This will clear the consent record; the cookie banner will reappear on your next page load so you can make a new choice.