Privacy Policy

1. Data controller

Controller: GroCook.

2. Data we process

• Account data: name, email, hashed password and signup metadata.
• Functional data: recipes, favorites, shopping lists and weekly plans.
• Technical and browsing data: pages visited, ad interactions, browser/device information, IP address and consent signals, depending on active services and selected choices.

3. Purposes and legal bases

• Provide the requested service and maintain your account (contract performance).
• Comply with legal obligations (legal obligation).
• Measure and improve the service through analytics (consent where required), according to Google Consent Mode's state.
• Show and measure AdSense advertising (consent where required); prevent fraud and protect the service.
• Ensure security and prevent fraud (legitimate interest).

4. Recipients and processors

We do not sell personal data. Google and advertising providers selected in the CMP may receive browsing and technical data and consent signals to deliver, measure and protect advertising. Google's role (independent controller or processor) depends on the service and purpose. Check applicable providers and choices in the CMP and Cookie Policy.

Google information about data in advertising services

5. Data retention

We keep data while your account is active or for legally required periods.

6. Rights

You may exercise access, rectification, erasure, objection, restriction and portability rights.

7. Cookies and analytics

Cookie and consent details are explained in the Cookie Policy. Google tags start with analytics and advertising storage denied; advertising choices are managed through Google AdSense privacy messages (CMP), and requests and storage depend on the consent signals received.

8. Minors and account use

Users confirm that provided data is accurate and they have legal capacity to use the service.

9. Maps and external providers

The store page requests one HTTPS map image from the configured provider. The provider receives the IP address and GroCook origin through the Referer header required to deliver it; GroCook sends no account data or user location and performs no territorial preloading.

10. Updates

GroCook may update this policy to reflect legal or functional changes.