Privacy policy

Hi! This policy explains what personal data The Blue Salt ("we", "us") processes when you use The Blue Salt website and app, why, and what rights you have. It's written to comply with the Swiss Federal Act on Data Protection (FADP/nDSG), the EU General Data Protection Regulation (GDPR), the UK GDPR, and applicable US state privacy laws.

1. Who is responsible

Controller: [FULL NAME], The Blue Salt, [STREET AND NUMBER or PO box], [POSTCODE] [CITY], Switzerland. Email: privacy@[DOMAIN] (or hello@[DOMAIN]).

2. What we process and why

a) Visiting the website (server logs). When you open our site, our hosting provider automatically processes technical data: IP address, date and time, page requested, referrer, browser and operating system. We need this to deliver the site securely and fix errors. Legal basis: our legitimate interest in a secure, working website (Art. 6(1)(f) GDPR). Logs are deleted after a maximum of [30] days.

b) Cookies and similar technologies. We use necessary cookies to make the site work (for example to remember your cookie choice and keep you signed in). With your consent, we also use analytics and marketing cookies — see sections 3 and 4 and our Cookie policy. Legal basis: necessary cookies — legitimate interest; all others — your consent (Art. 6(1)(a) GDPR), which you can withdraw anytime via "Cookie settings" in the footer. We store a record of your consent choice (a random ID, timestamp, policy version, your choices and whether your browser sent a privacy signal — no IP address, no account ID) for 3 years to prove compliance.

c) App preferences. If you use the dinner finder, your answers (for example household size, diets, allergens to avoid) are stored in your browser tab. If you create an account, your profile name, avatar and saved dinner preferences are stored in our database so you can use them next time. We use them only to suggest dinners. Diet and allergen preferences are never used for advertising.

d) Your account. If you register, we process your email address (or your sign-in provider's account details, such as Google) to let you sign in. You can ask us to delete your account at any time.

e) Contacting us. If you email us, we process your email address and message to reply. We delete it when the conversation is finished unless we need to keep it by law.

3. Analytics (only with your consent)

Google Analytics 4 (Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland; parent company Google LLC, USA). Helps us understand which pages and recipes are popular. IP addresses are not stored by GA4. Data is retained for 14 months. We use Google Consent Mode: without your consent, no analytics cookies are set.

4. Marketing (only with your consent)

We advertise The Blue Salt on other platforms and measure whether our ads work. With your consent, the following tools set cookies or use similar technologies to recognise that you came from or visited our site:

• Google Ads (Google Ireland Ltd. / Google LLC, USA) — conversion measurement and remarketing.
• Meta Pixel (Meta Platforms Ireland Ltd., Merrion Road, Dublin 4, Ireland / Meta Platforms Inc., USA) — ads on Facebook and Instagram.
• X Pixel (X Corp., USA / Twitter International Unlimited Company, Ireland) — ads on X.
• LinkedIn Insight Tag (LinkedIn Ireland Unlimited Company, Dublin, Ireland / LinkedIn Corp., USA) — ads on LinkedIn.

These providers may combine this data with data from your account on their platforms, under their own privacy policies. Without your consent, none of these tags load.

5. Service providers

We use trusted providers who process data on our behalf:

• Hosting and app platform: Lovable (Lovable Labs Incorporated, Sweden/EU) and its infrastructure providers.
• Database and accounts: Supabase (Supabase Inc., USA; data hosted in [REGION]).
• Tag management: Google Tag Manager (Google). GTM itself sets no cookies.

6. Transfers abroad

Some providers are located in the USA or process data there. Where possible, these companies are certified under the EU–US Data Privacy Framework and the Swiss–US Data Privacy Framework; otherwise we rely on the EU Standard Contractual Clauses (with the Swiss addendum).

7. Your rights

Depending on where you live, you have the right to: access your data; correct it; delete it; restrict or object to processing; data portability; withdraw consent at any time (with effect for the future); and lodge a complaint with a supervisory authority. In Switzerland, that is the Federal Data Protection and Information Commissioner (FDPIC/EDÖB); in the EU, the authority in your country; in the UK, the ICO. To exercise your rights, email privacy@[DOMAIN]. We'll reply within 30 days.

US residents (e.g. California, Colorado, Virginia and other states): We don't sell personal information for money. Marketing pixels may count as "sharing" for targeted advertising. You can opt out anytime via "Cookie settings" → turn off Marketing. We also honour Global Privacy Control (GPC) browser signals.

8. Children

The Blue Salt is not directed at children under 16. We don't knowingly collect data from them.

9. Security

We use HTTPS encryption and limit access to data to what's necessary.

10. Changes

We may update this policy when our site or the law changes. The current version is always on this page.