Privacy Policy
pashutFree — July 30, 2026
1. Controller and contact
pashutFree operates the service and determines the purposes and means of processing the data described in this policy. Privacy requests of any kind may be sent only through the contact form available on the site; there is no separate dedicated privacy mailbox, and requests submitted through the form are handled directly by the site operator.
2. Information we receive
Account data can include email address, display name, locale, profile image, authentication provider, and account timestamps. Community and preference data can include comments, ratings, uploaded review photos, favorites, collections, recently viewed recipes, and reports. Contact messages include the name, email, message, source page, and submission time supplied with the form.
3. Optional first-party analytics
Only after analytics consent, pashutFree records first-party events such as page path, locale, event type, coarse device category, referrer hostname, and an anonymous browser identifier. Signed-in events may be linked to the account ID. The application does not store IP addresses in the analytics table. Network and security providers may still process connection data in ordinary server logs.
4. Why information is used
Information is used to create and secure accounts, provide favorites and personal history, display and moderate community contributions, answer contact requests, prevent abuse, operate and troubleshoot the service, understand consented product usage, and meet applicable legal obligations. pashutFree does not currently operate a newsletter mailing list through this application.
5. Providers and disclosures
Supabase processes database, authentication, and some storage data; Cloudflare R2 stores site and user-uploaded image objects; and Resend processes contact email when that service is configured. A future hosting or CDN provider will also process normal request data. Data is shared only as needed to provide, secure, support, or legally protect the service.
6. Retention
Account and account-linked product data are retained while the account remains active, and are deleted or de-identified within a reasonable period after an account-deletion request, subject to moderation, security, and legal needs. Messages submitted through the contact form are retained for up to 24 months from when the request was handled, unless a longer period is required by law. Server-side analytics events are retained for up to 14 months from collection and are then deleted or de-identified. Choosing Essential Only immediately clears locally stored browser analytics data, as described in the Cookie Policy.
7. Access, export, correction, and deletion
A signed-in user can download an account-data export from the profile. Profile information can be corrected there. A deletion request may be submitted through the contact form using the account email; identity and data dependencies must be checked before deletion. Applicable law may also provide rights to access, correct, delete, restrict, object, or receive a portable copy. Some records may be retained or de-identified where law, security, fraud prevention, or another valid obligation requires it.
8. International processing and security
Some of the providers listed above may process data on servers located outside Israel, subject to their applicable terms and the level of protection required by law. The service uses standard security measures, including access controls, row-level security policies, server-only credentials, and a minimized set of collected fields, but no online service can guarantee absolute security against every breach or failure.
9. Children and changes
The service is not intended for children under 13 acting independently, and we do not knowingly request their personal data. A parent or guardian should contact us if a child submitted personal data. Policy changes will be shown by updating this page and its date; material changes will be communicated where required.