Privacy policy
This site collects as little as it can get away with. Below is exactly what is collected, why, and how to have it deleted.
Last updated: 20 August 2026
Newsletter
If you subscribe, your email address is stored so the newsletter can be sent to you. Nothing else is required, and every email includes an unsubscribe link.
Contact form
The name, email address, subject, and message you type are stored so the message can be read and answered. They are not used for marketing.
Account
If you create an account, an email address is stored, along with the recipes you save, the collections you build, and your taste preferences. Signing in with Google shares your email address and name with this site, not your Google password.
Instagram messages
If you comment on a post or send a direct message on Instagram, Instagram gives this site a scoped user ID, your username, and the text you sent, so an automated reply can be delivered. That ID is specific to this account and cannot be used to look you up elsewhere.
Analytics
Aggregate traffic statistics are collected to see which recipes people read. This is measurement, not profiling, and it is not used to build an advertising profile of you.
Why this is allowed to be collected
Under Israeli privacy law and the GDPR, personal data needs a lawful basis. Each of the above has a different one:
- Consent
Newsletter subscription and analytics. You gave it by subscribing or accepting, and you can withdraw it at any time.
- Performing a service you asked for
Your account, your saved recipes, and answering your contact message or Instagram message. Without this data, the thing you asked for cannot happen.
- Legitimate interest
Keeping the site secure and preventing abuse — for example, rate limits and spam protection on forms.
Who else can see it
No personal data is sold, rented, or traded. It is handled by the services this site runs on, each of which acts only on instructions:
- Supabase
Database and sign-in. Stores the account, newsletter, and message data described above.
- Vercel
Hosting. Processes the requests that serve these pages.
- Cloudflare
Content delivery and protection in front of the site.
- Google
Analytics, and Google sign-in if you choose to use it.
- Meta (Instagram)
Comments and direct messages, when you contact the account on Instagram.
Some of these operate outside Israel and the EU. Beyond them, data is disclosed only where the law requires it.
How long it is kept
- Newsletter
Until you unsubscribe, and then removed.
- Contact messages
Kept while the conversation is open and for a reasonable period after, then deleted.
- Account data
For as long as the account exists. Deleting the account deletes it.
- Instagram messages
Kept as a record of the conversation, and deleted on request.
- Analytics
Retained in aggregate, on the analytics provider's own schedule.
Your rights
You can ask what is held about you, have it corrected, have it deleted, or withdraw consent. In Israel these rights come from the Protection of Privacy Law; in the EU and UK, from the GDPR.
- See your data
Ask for a copy of what is stored about you.
- Correct it
Ask for anything inaccurate to be fixed.
- Delete it
Ask for it to be erased. See the section below.
- Withdraw consent
Unsubscribe from the newsletter, or ask for analytics data to be removed.
- Complain
In Israel, to the Privacy Protection Authority; in the EU, to your local data protection authority.
Deleting your data
To have your data deleted, email the address below from the address you want removed, or send a message from the Instagram account you used, and say what you want deleted. No account or form is needed.
Requests are answered within 30 days. If you have an account, you can also delete it from your account settings, which removes your saved recipes, collections, and preferences.
For Instagram: replying with the word "הסר" or "stop" stops all automated messages immediately. To also have the message history deleted, send an email.
Cookies
The site sets cookies that are necessary for it to work — keeping you signed in and remembering your language and theme. These cannot be turned off without breaking the site.
Analytics cookies are separate and are used only to count visits. You can block cookies in your browser settings; the recipes will still work.
Children
This site is not directed at children under 16, and accounts are not knowingly created for them. If you believe a child has given personal details here, email me and I will delete them.
Changes to this policy
If this policy changes, the date at the top of the page changes with it. Material changes will be announced in the newsletter.
Questions about your data?
For anything on this page, including deletion requests, email me here:
ofrilahad.contact@gmail.com