Privacy

This is not a template. It is the list of what Verdebite stores, why, and where. If something changes, this page changes.

What gets stored

Your email

What for: To identify your account and to be able to write to you if something happens with it.

Where: A Postgres database hosted in the United States (Neon).

Your password, derived

What for: To check that it is you when you sign in.

Where: The same database. It is stored after being run through PBKDF2-SHA256 with 210,000 iterations and a different salt for each account: the password cannot be recovered from that, and not even I can see it.

Your settings

What for: So the recipes are written for your machine and for how many people are eating, and so you find them the same on your phone and on your computer.

Where: The same database, plus a copy in your own browser. It includes your juicer, how many people you cook for, the ingredients you marked as ones you do not eat, the cuisines you prefer, which day you are on, and what you have checked off on the shopping list.

What is NOT done

• ✓Your information is never sold and never shared with anyone.
• ✓There are no ads, no third-party trackers and no social media pixels.
• ✓You do not get emails selling you something else unless you asked for them.
• ✓No card details are stored: the payment processor handles that and it never passes through this site.

Your settings live in two places

One copy in your browser and another in your account. The browser one is so the site runs fast without waiting on the network; the account one is so whatever you set up on the computer you find the same on your phone. The most recent one always wins.

If you clear your browser data, the browser one disappears and the account one comes back the next time you sign in. If you delete your account, both are gone.

Cookies

The one that matters is your session cookie, and it only exists if you sign in. It is signed, it is HttpOnly —not even the page's own JavaScript can read it— and it expires in thirty days.

There is also Google Analytics, which sets its own cookies to count visits. It is there for one thing only: to know where people come in and which page they leave on. What it sees is which page you opened, which link you came from, the country and the kind of device. It never gets your email, your name, your settings, or what you bought.

There are no advertising cookies and no cross-site tracking cookies. And if you would rather not show up even in the visit count, any blocker stops it: nothing here depends on it.

What you can ask for

That I send you everything stored about you, or that I delete it. Write to me at hola@verdebite.com from your account email and I will do it. Deleting the account deletes the email, the derived password and your settings; no copy is kept “just in case”.

Minors

This is not meant for anyone under 13, and no information is knowingly asked of them or kept about them. If you think a child's account ended up here, write to me and I will delete it.

Who answers

RCS LLC d/b/a Verdebite, at hola@verdebite.com. It is one person, not a department: I answer myself.