Privacy policy (updated June 28, 2026)

1. Controller
Carlo Beck
Rathenaustraße 37
99085 Erfurt
Germany

Email: support@cravory.app

2. General information
Protecting your personal data is important to us. Personal data is handled confidentially and in accordance with applicable data-protection law, particularly the GDPR.

3. Hosting
Our website is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. Vercel processes technical data to provide secure and stable operation.
Vercel GDPR

4. Access data and server logs
Technical information such as IP address, access time, browser, operating system, and referrer is stored automatically when you visit. It is used solely for technical monitoring, security, and stability.

5. Vercel Web Analytics
We use Vercel Web Analytics for aggregate usage statistics and technical optimization. It does not use cookies or personal tracking profiles. Processing is based on our legitimate interest under Article 6(1)(f) GDPR.
Vercel Analytics Privacy

6. User accounts and registration
To provide the application, we process data including email address, sign-in information, group and voting data, saved recipes, and uploaded images under Article 6(1)(b) GDPR. Verification and password-reset emails are delivered through Resend, Inc., which processes the email address and delivery data. The operator must review this wording and international data transfers before production launch.

7. Database and backend
We use Supabase to store and process user data. Our database is hosted in the EU. Personal data and user-created content may be processed there.
Supabase Privacy

8. User content
Users can create and upload recipes, images, and group data. This content is stored, displayed, and processed within the application.

9. Contacting us
When you contact us by email, the submitted data is stored to handle your request.

10. Your rights
Under the GDPR, you have rights including access, correction, deletion, restriction of processing, objection, and data portability.

11. Data deletion
Users can delete their account and associated personal data in account settings or request deletion by email.