Privacy Policy

1. Overview

MyCookToday ("we", "us", "our", or "the website") is committed to protecting your privacy. This Privacy Policy explains what information we collect, how we use it, how we protect it, and your rights regarding your personal information when you visit and use www.mycooktoday.com.

This policy applies to this website and any products or services linking to this policy. "You" refers to any person who accesses, uses, or browses the website.

Data Controller

MyCookToday is the data controller responsible for your personal information. For any privacy-related inquiries, please contact us at: b809847363@163.com

2. Children's Privacy

We comply with the Children's Online Privacy Protection Act (COPPA) and applicable global children's privacy regulations. This website is intended for users aged 18 and older. We do not knowingly collect personal information from children under the age of 13 (or under the applicable age of digital consent in your jurisdiction, which may be 16 in the EU/EEA). If you believe we have collected information from a child without appropriate consent, please contact us immediately and we will promptly delete such information.

3. Information We Collect and How We Use It

3.1 Information You Provide

When using certain features of this website, you may provide the following personal information:

• Account Registration (upcoming feature): When you create an account, we collect your email address, username, and password (stored encrypted via secure hashing). You may optionally provide an avatar or profile bio.
• Email Newsletter: If you subscribe to our newsletter or updates, we collect your email address to send recipe updates, announcements, and promotional content.
• Contact and Feedback: When you submit feedback, recipe suggestions, or contact us via our forms, you may provide contact information (email or other contact details) so we can respond.
• Comments and User-Generated Content (upcoming feature): If you post comments or submit recipes, your display name, email address, and content will be stored. Your email address will not be publicly displayed.

We use this information to:

• Create and manage your user account
• Send requested newsletters and updates
• Provide customer support and respond to inquiries
• Personalize your browsing experience
• Improve our website content and functionality
• Process your feedback and submissions

3.2 Automatically Collected Information

Like most websites, we automatically collect certain non-personally identifiable information through log data and analytics tools:

• Google Analytics: We use Google Analytics to collect anonymized browsing data including your IP address (anonymized), browser type, operating system, ISP information, pages visited, time spent, referral sources, approximate geographic location, and traffic patterns. This data helps us analyze website usage, improve performance, and enhance user experience. See Google's Privacy Policy for more information.
• Browser Local Storage: We use sessionStorage and localStorage to temporarily store your ingredient selections, flavor preferences, and pairing results on your local device to enable page-to-page functionality. This data stays on your device and is not transmitted to our servers. sessionStorage is automatically cleared when you close your browser.

4. Legal Basis for Processing (GDPR/LGPD/DPDP)

For users in the European Economic Area (EEA), United Kingdom, Brazil, India, and other jurisdictions with data protection laws, we process your personal data based on the following legal grounds:

• Consent (Art. 6(1)(a) GDPR): When you have given explicit consent for processing (e.g., subscribing to newsletters, non-essential cookies).
• Contractual Necessity (Art. 6(1)(b) GDPR): When processing is necessary to provide services you have requested (e.g., managing your account, responding to inquiries).
• Legitimate Interests (Art. 6(1)(f) GDPR): When processing is necessary for our legitimate interests (e.g., analyzing website usage, improving security, preventing fraud) and these interests are not overridden by your rights.
• Legal Obligation (Art. 6(1)(c) GDPR): When processing is necessary to comply with legal obligations.

5. Cookies and Similar Technologies

Cookies are small data files sent to your browser and stored on your device. We and our service providers use cookies and similar technologies for the following purposes:

• Essential/Strictly Necessary Cookies: Required for basic website functionality, maintaining your login session (when accounts are launched), remembering your preferences, and ensuring website security. These cookies cannot be disabled.
• Analytics/Performance Cookies: Through Google Analytics to understand how visitors use the website, helping us improve content and performance.
• Advertising Cookies (upcoming): When we integrate Google AdSense or other ad services, advertising partners may use cookies to serve relevant ads. These cookies are controlled by the respective advertising networks.
• Functionality Cookies (upcoming): Remember your details when commenting (name and email) for your convenience.

Cookie Consent

For users in jurisdictions requiring consent (EEA, UK, Brazil, California, India, etc.), we will present a cookie consent banner upon your first visit, allowing you to accept or decline non-essential cookies. You may manage or delete cookies through your browser settings at any time. Please note that disabling cookies may affect certain website features.

You can opt out of personalized advertising by visiting Google Ad Settings, aboutads.info, or Your Online Choices (EU).

6. Third-Party Advertising (Upcoming)

We plan to integrate third-party advertising services (such as Google AdSense, and potentially Raptive or similar ad networks). These third-party advertising partners may use cookies, web beacons, pixel tags, and similar technologies to collect information for ad targeting, including:

• IP address
• Browser type and device information
• ISP information
• Pages visited and time spent
• Click behavior and interests

These third parties have their own independent privacy policies, and we have no responsibility or liability for their activities. Advertising cookies are governed by the respective ad networks' privacy policies.

7. Third-Party Links and Embedded Content

This website contains links to third-party platforms (X/Twitter, YouTube, Instagram, Reddit, etc.) and may include embedded content (videos, images, social media posts). When interacting with these:

• You will leave this website and be subject to the third party's privacy policy
• Embedded content behaves exactly as if you visited the third-party website directly
• Third parties may independently collect data, use cookies, and track your interaction
• If you are logged into those platforms, embedded content may track your interaction

We are not responsible for the privacy practices, content, or policies of third-party websites. We encourage you to review the privacy policy of every site you visit.

8. Information Disclosure

We do not sell, trade, or rent your personal information to third parties. We may disclose your information in the following circumstances:

1. Trusted Service Providers: We may share information with third-party service providers who assist in operating the website, such as hosting providers, email service providers, and analytics providers. These providers are contractually obligated to keep your information confidential and only use it for the purposes we specify.
2. Legal Requirements: We may disclose information when required by law, legal process, court order, governmental request, or to protect our rights, property, safety, or the rights/property/safety of others.
3. Terms Enforcement: To enforce our Terms and Conditions, investigate potential violations, or protect our rights and security.
4. Business Transfer: In the event of a merger, acquisition, restructuring, asset sale, or bankruptcy, your information may be transferred as a business asset. Your information will continue to be protected by this or a similar privacy policy.
5. With Your Consent: We may disclose your information to third parties with your explicit consent.

9. Email Marketing and Communications

By subscribing to our newsletter, you consent to receive recipe updates, website announcements, and promotional content. We do not sell, trade, or rent your email address to third parties for marketing purposes.

9.1 "Sunday Fridge Clean-Out Guide" Newsletter

Our homepage offers a subscription to the "Sunday Fridge Clean-Out Guide" — a weekly email that provides creative, budget-friendly ideas for using up leftovers in your fridge. By entering your email address and clicking "Subscribe," you explicitly consent to receiving this weekly newsletter.

What we collect: Only your email address. We do not collect your name, phone number, or any other personal information through this subscription form.

How we use your email: Your email is used solely to deliver the weekly "Sunday Fridge Clean-Out Guide" newsletter. We will never share, sell, or rent your email address to third parties.

One-click Unsubscribe: Every email we send includes a clearly visible unsubscribe link. You may unsubscribe at any time with a single click. After unsubscribing, you will be immediately removed from our mailing list and will no longer receive any marketing emails from us.

Data retention: Your email address is retained only until you unsubscribe. Upon unsubscribing, we will promptly delete your email from our active mailing list.

Unsubscribe/Opt-Out: You may unsubscribe at any time by:

• Clicking the "unsubscribe" link at the bottom of any marketing email
• Contacting us at b809847363@163.com to request removal

We comply with the CAN-SPAM Act (US), CASL (Canada), PECR (UK), and global anti-spam regulations. After unsubscribing from marketing emails, we may still send service-related communications regarding your account (e.g., password reset, security notifications).

10. International Data Transfers

Your information may be processed and stored in countries other than your country of residence, including the United States. These countries may have different data protection laws.

When transferring personal data internationally, we implement appropriate safeguards including:

• Using service providers that comply with EU-US Data Privacy Framework or equivalent adequacy decisions
• Implementing Standard Contractual Clauses (SCCs) where required
• Ensuring appropriate technical and organizational security measures are in place

11. Data Retention

We retain your information for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required by law:

• Account Information: Retained for the duration your account is active. Upon account deletion, we will delete or anonymize your personal information unless retention is required by law.
• Comments/User-Generated Content: Comments and metadata are retained indefinitely to automatically approve follow-up comments without moderation queues.
• Analytics Data: Google Analytics data is retained per Google's data retention policy (typically 26 months).
• Email Subscriptions: Your email is retained until you unsubscribe.
• Legal Requirements: We may retain certain information if required by tax, accounting, or other legal obligations (typically 7 years for business records).

12. Data Security

We implement appropriate technical and organizational measures to protect your personal information, including:

• HTTPS/TLS encryption for data transmission
• Passwords stored using secure cryptographic hashing (never in plaintext)
• Restricted access to personal information on a need-to-know basis
• Regular security practices reviews
• Secure data storage with industry-standard protections

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

12.1 European Economic Area (EEA) / United Kingdom / Switzerland (GDPR/UK GDPR)

If you are located in the EEA, UK, or Switzerland, you have the following rights under the General Data Protection Regulation:

• Right of Access (Art. 15): You may request a copy of personal data we hold about you.
• Right to Rectification (Art. 16): You may request correction of inaccurate or incomplete personal data.
• Right to Erasure ("Right to be Forgotten", Art. 17): You may request deletion of your personal data in certain circumstances. Note that this may result in loss of access to content previously provided to you.
• Right to Restriction of Processing (Art. 18): You may request that we restrict processing of your data.
• Right to Data Portability (Art. 20): You may request your personal data in a structured, commonly used, machine-readable format for transfer to another controller.
• Right to Object (Art. 21): You may object to processing based on legitimate interests, including direct marketing and profiling.
• Right to Withdraw Consent (Art. 7): You may withdraw previously given consent at any time. Withdrawal does not affect the lawfulness of processing prior to withdrawal.
• Right to Lodge a Complaint (Art. 77): You may file a complaint with a supervisory authority (e.g., your local data protection authority) if you have concerns about our processing of your data.

12.2 United States (CCPA/CPRA and State Laws)

California Residents (CCPA/CPRA):

If you are a California resident, the California Consumer Privacy Act (as amended by CPRA) grants you the following rights:

• Right to Know: Request information about the categories and specific pieces of personal information collected, disclosed, or sold.
• Right to Delete: Request deletion of your personal information, subject to certain exceptions.
• Right to Correct: Request correction of inaccurate personal information.
• Right to Opt-Out of Sale/Sharing: We do not sell your personal information as defined by CCPA. We do not share personal information with third parties for cross-context behavioral advertising without consent.
• Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights (e.g., denying goods/services, charging different prices).
• Right to Limit Use of Sensitive Personal Information: We do not collect or use sensitive personal information beyond what is necessary to provide services.

"Do Not Sell My Personal Information": MyCookToday does not sell your personal information to third parties for monetary or other valuable consideration. We do not share personal data with third parties for cross-context behavioral advertising.

Residents of other US states (Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, etc.) may have similar rights under their respective state privacy laws. Please contact us to exercise your rights.

12.3 Brazil (LGPD)

Under Brazil's Lei Geral de Proteção de Dados (LGPD), Brazilian users have the right to:

• Access and obtain a copy of your personal data
• Correct incomplete, inaccurate, or outdated data
• Request anonymization, blocking, or deletion of unnecessary or excessive data
• Request portability of your data to another service provider
• Delete personal data processed with your consent
• Obtain information about third parties with whom we share data
• Obtain information about the possibility of refusing consent and the consequences
• Withdraw your consent at any time
• Request review of automated decisions

12.4 India (Digital Personal Data Protection Act, DPDP)

Under India's Digital Personal Data Protection Act 2023, Indian users have the right to:

• Access your personal data
• Correct and update inaccurate or misleading personal data
• Request erasure of personal data
• Nominate a consent manager to exercise your rights
• Withdraw consent previously given
• Not be subject to automated decision-making without an opportunity to contest
• Grievance redressal: We will respond to complaints within 30 days

For Indian users: By providing your information, you consent to the processing, storage, and transfer of your personal information as described in this policy, including international transfers.

12.5 Australia (Privacy Act 1988)

Under Australia's Privacy Act 1988 and the Australian Privacy Principles (APPs), Australian users have the right to:

• Access personal information we hold about you
• Request correction of inaccurate personal information
• Request deletion of personal information in certain circumstances
• Complain about a breach of the APPs
• Opt-out of direct marketing communications

If you have concerns about our handling of your personal information, please contact us first. If unsatisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC).

12.6 South Asia and Other Regions

We respect privacy rights globally. Users in all regions may contact us to:

• Access, correct, or delete your personal information
• Object to or restrict processing
• Request data portability
• Withdraw consent

We will respond to valid requests within 30 days, or as required by applicable law. We may need to verify your identity before processing requests.

13. Social Media

This website provides social media sharing features (X/Twitter, YouTube, Instagram, Reddit, etc.). When interacting with us on these platforms:

• You voluntarily disclose personal information publicly
• These platforms have their own privacy policies and data practices
• Publicly shared information may be collected and used by others
• We are not responsible for the use, storage, or dissemination of publicly disclosed information

14. Analytics and Opt-Out

You can opt out of Google Analytics tracking by installing the Google Analytics Opt-out Browser Add-on.

15. Policy Updates

We may update this Privacy Policy periodically. Updates will be posted on this page with a revised "Last updated" date. Material changes may be announced on the website homepage or via email to registered users. We encourage you to review this policy regularly. Continued use of the website after changes constitutes acceptance of the updated policy.

16. Contact Us / Grievance Officer

If you have questions, concerns, complaints, or requests regarding this Privacy Policy or our data practices, please contact us at: b809847363@163.com

For users in the EEA/UK: While we do not have a formal Data Protection Officer (DPO) due to our scale, we treat all privacy inquiries with priority. For users in India: Our Grievance Officer can be reached at the email above, and we will acknowledge and address grievances within 30 days as required by the DPDP Act.