Privacy Policy

Account data: first name, last name, email address, a hashed version of your password (we never store the password itself), and your language preference.

Content you create: bowls, recipes, scores, notes, photos you upload, comments, reviews, and bowls you save.

Technical data: when you sign in we store your IP address and browser user agent as part of your session, and we keep short-lived IP-based counters to protect the service from abuse (rate limiting).

We use your data only to run the service: authenticating you, storing your bowls and photos, sending transactional emails (email verification and password reset), and moderating public content. We do not show ads, we do not profile you, and we never sell your data.

Bowls are private by default. If you mark a bowl as public, its content (including photos, your first and last name as author of comments and reviews) becomes visible to anyone on the internet, including people without an account, and may be indexed by search engines. You can make a bowl private again at any time.

We rely on a small number of providers to run the service: Vercel (hosting), Turso (database), UploadThing (photo storage), and Resend (transactional email). They process data on our behalf and some of them may process it on servers located outside the EU, including the United States.

We only use a technical session cookie to keep you signed in. No analytics, no tracking, no third-party cookies.

We keep your data for as long as your account exists. When your account is deleted, your bowls, photos, comments, reviews and other content are deleted with it.

You can access, correct, export, or delete your data at any time. You can edit your name from your profile page; for anything else — including full account deletion — email us and we will take care of it. If you are in the EU, you also have the right to lodge a complaint with your local data protection authority.

If this policy changes, the new version will be published on this page with an updated date.