Privacy Policy

Garndish is operated by Julian Teofilov, an individual based in Bulgaria.

For the purposes of applicable data protection law, including the General Data Protection Regulation (GDPR), Julian Teofilov is the data controller for the personal data described in this Privacy Policy.

If you have any questions about this Privacy Policy or how your personal data is handled, you can contact us at:

Email: support@garndish.com

We collect only the information necessary to provide and operate Garndish.

Account information

When you create a Garndish account, we may collect:

• Your email address
• Your name or username, if you provide one
• Authentication and session information necessary to keep you signed in

You may also choose to sign in using your Google account. If you use Google Sign-In, Google provides Garndish with information necessary to authenticate your account, such as your name, email address, and Google account identifier.

Garndish does not receive your Google password.

Recipe and account activity

If you create recipes, save recipes, like recipes, or otherwise interact with Garndish, we store the information necessary to provide those features. This information may be associated with your Garndish account.

Uploaded images

Garndish allows users to upload images associated with recipes.

Images uploaded to Garndish are stored and delivered using Cloudinary, a third-party image hosting and delivery service. Cloudinary may process the uploaded images and associated technical metadata as necessary to provide its services.

Recipe images may be publicly accessible when they are displayed as part of publicly available recipes. Users should therefore avoid uploading images containing sensitive personal information or information about other people without their permission.

Garndish uses a limited number of cookies and browser storage mechanisms.

Authentication

Garndish uses cookies managed by its authentication system to maintain your signed-in session and authenticate requests. These cookies are necessary for account functionality.

Theme preference

Garndish stores your light/dark mode preference so that the website can remember your chosen appearance.

We do not use cookies for advertising or cross-site behavioral tracking.

We use personal information only as necessary to:

• Create and manage your account
• Authenticate you and maintain your session
• Provide Garndish's features
• Store and display recipes and other content
• Save your recipes and likes
• Remember your preferences
• Store and deliver uploaded images
• Monitor and improve the performance and reliability of Garndish
• Protect Garndish against abuse, fraud, and security threats
• Communicate with you about the service when necessary
• Comply with applicable legal obligations

We do not sell your personal information.

We do not use your information for targeted advertising.

Where the GDPR applies, we process personal data on the following legal bases:

Performance of a contract

We process information where it is necessary to provide the Garndish services you request, such as creating and maintaining your account.

Legitimate interests

We may process information where it is necessary to operate, secure, maintain, and improve Garndish, provided that our interests do not override your rights and freedoms.

Legal obligation

We may process or retain information where required to comply with applicable laws or legal obligations.

Consent

Where we rely on your consent for a particular processing activity, you may withdraw that consent at any time.

Garndish uses a limited number of third-party services to operate the website. These may include:

• Vercel — website hosting and analytics
• Neon — database hosting
• Better Auth — authentication and session management
• Google — optional Google Sign-In authentication
• Cloudinary — image storage, processing, and delivery
• Resend — transactional email

These providers may process information on our behalf as necessary to provide their respective services. They may also process certain information independently in accordance with their own privacy policies and applicable terms.

We retain account and other personal information for as long as necessary to provide Garndish and maintain your account.

If you delete your account, we will delete or anonymize personal information associated with your account within a reasonable period, except where we are required to retain certain information by law or where retention is necessary to establish, exercise, or defend legal claims.

Technical and analytics information may be retained according to the retention practices of the services we use.

If the GDPR applies to you, you may have the following rights regarding your personal data:

• Right of access — to request a copy of the personal data we hold about you.
• Right to rectification — to request correction of inaccurate or incomplete information.
• Right to erasure — to request deletion of your personal data, subject to applicable legal exceptions.
• Right to restriction — to request restriction of processing in certain circumstances.
• Right to data portability — to receive certain personal data in a structured, commonly used, and machine-readable format.
• Right to object — to object to certain processing based on legitimate interests.
• Right to withdraw consent — where processing is based on consent.

To exercise these rights, contact us at: support@garndish.com

We may need to verify your identity before fulfilling certain requests.

You also have the right to lodge a complaint with the relevant data protection supervisory authority.

We take reasonable technical and organizational measures to protect personal information against unauthorized access, alteration, disclosure, or destruction.

However, no internet-based service can be guaranteed to be completely secure.

Garndish is not intended for children under the age of 13.

We do not knowingly collect personal information from children under 13. If you believe that a child has provided personal information through Garndish, please contact us so that we can take appropriate action.

Some of the third-party services used by Garndish may process information in countries outside the European Economic Area (EEA).

Where personal data is transferred outside the EEA, we rely on appropriate safeguards required by applicable data protection law, such as an adequacy decision or appropriate contractual safeguards where applicable.

We may update this Privacy Policy from time to time to reflect changes to Garndish, the services we use, or applicable legal requirements.

When we make changes, we will update the "Last updated" date at the top of this page.

If you have questions about this Privacy Policy, want to exercise your privacy rights, or have concerns about how your information is handled, please contact:

Julian Teofilov

support@garndish.com