Privacy notice

Who is responsible

Smart Eating Ireland is run by Sean Fitzgerald, who is responsible for your personal data (the "controller"). For anything about your data, email seanfitzgerald05@gmail.com.

If you don't have an account

You can use the offers and recipes without telling us anything. There is no analytics, advertising or tracking, and no cookie is set.

Like any website, our host receives your IP address and browser details to send you the pages, and keeps them for a short time in its logs. Your browser keeps the site's files and this week's prices so the site works offline; nothing about you is in them.

If you have an account

We keep:

• your name and email address
• your password, only as a one-way hash, never the password itself
• My kitchen: the shops you use, what you cook with, and what you have in your cupboard and freezer
• the recipes you save, the number of servings for each, and when you saved it
• when the account was created and last changed

We use these to run your account: to sign you in, to show offers and recipes for your kitchen, to list your saved recipes with their shopping list, and to email you a link when you reset your password or confirm your email address. We don't send newsletters or marketing.

The legal basis is that this is needed to provide the account you asked for (Article 6(1)(b) of the GDPR).

While you are signed in, your browser also keeps a note that you are, so pages show your account straight away rather than a moment later. The note holds nothing else and is never sent to us. It goes when you sign out, or on your next visit after your sign in has ended.

Keeping accounts safe

To keep accounts safe and stop abuse, we also keep:

• a cookie, sid, while you are signed in. It holds a random code, and we store only a hash of it. It is strictly necessary for signing in, so it needs no consent.
• the links we email to reset a password or confirm an email address, stored as hashes
• counts of failed sign ins and similar attempts. They are kept under a hash of the IP address or email address, so neither is stored.
• a record that your browser solved a small puzzle when you created an account or asked for a reset link, which keeps out automated sign ups. The puzzle runs on this site, and no other company is involved.

The legal basis is our legitimate interest in keeping the site and your account secure (Article 6(1)(f) of the GDPR).

How long we keep it

• Your account, My kitchen and your saved recipes: until you delete the account. A recipe you remove is deleted straight away.
• A sign in: 30 days, or until you sign out.
• A password reset link: 1 hour, or until it is used.
• A sign up waiting for its email address to be confirmed, with its link: 24 hours, or until it is confirmed.
• Counts of failed attempts, and puzzle records: about 15 minutes.
• Our host's logs: a short time, set by the host.

Who handles it for us

These companies run parts of the site for us. Each handles your data only to do that, under its data processing terms with us:

• Vercel hosts the site and runs the account service, in Dublin, Ireland.
• Turso stores the account database, in Amazon Web Services' Ireland region.
• Resend sends our emails, so your email address and the email pass through it.

These companies are based in the United States, so your data may be handled there. Where it is, it is covered by the safeguards the GDPR requires, set out in their data processing terms.

We never sell your data, and we don't share it with anyone else unless the law requires us to.

Your rights

• See and correct your name and email on your Account page, your shops, equipment and what you have in, in My kitchen, and your recipes in Saved recipes.
• Delete your account, and everything in it, on your Account page.
• Ask for a copy of your data, or object to how we use it, by emailing seanfitzgerald05@gmail.com. We'll answer within a month.

If you are unhappy with how we handle your data, you can complain to the Data Protection Commission at dataprotection.ie.

Changes

When this notice changes, the date at the top changes too.