Privacy Policy
Privacy policy for Chinese Food at Home, covering controller details, current data use, analytics and ads status, community data status, and GDPR rights.
Controller and Contact
Chinese Food at Home is currently documented as a personal website owned by Mr. Lu, not a company. Public contact email: esseninnb@gmail.com.
Additional legal identity or postal-address details are not displayed here unless legally required.
Current Data Use
This build can collect account data through Supabase Auth using email/password, public display names, per-recipe ratings, and submitted recipe comments. Comments are held for moderation before public display.
The ingredient matcher runs in the browser using the ingredients typed by the visitor. The current matcher does not send ingredients to an AI API.
The production server may keep standard Nginx access logs for security, operations, troubleshooting, and private traffic reporting. The current server setup rotates these logs for roughly 30 days.
Private traffic reports are generated from those server logs at an administrator-only, password-protected dashboard. The public site does not add third-party analytics scripts or analytics cookies for this report.
The current static build does not intentionally collect special-category personal data and does not perform automated decision-making or profiling.
Hosting
Hosting is currently documented as a provider or server in South Korea. Hosting providers may process standard server logs such as IP address, request path, browser user agent, and timestamp for security and operations.
If the site intentionally targets visitors in a specific jurisdiction, uses non-essential analytics or ads, or collects account data, hosting location, processor contracts, log retention, and any cross-border data-transfer requirements should match that use case.
Legal Bases Under GDPR
Where privacy laws such as the GDPR apply, account and community functions may rely on contract necessity when they are needed to provide the requested service.
Security logging, abuse prevention, and basic operations may rely on legitimate interests or a comparable lawful basis where those interests are not overridden by visitor rights.
Analytics cookies, personalized advertising, remarketing, and non-essential Google tags should rely on consent where required, especially if the site later intentionally targets jurisdictions that require opt-in consent.
Contact emails are processed to respond to the request and keep necessary records.
Analytics and Advertising
Google Analytics, Google AdSense, conversion tracking, and remarketing are not active in the current build.
Any analytics or advertising change must update this policy to explain cookies, consent choices, ads personalization, and data processing.
Remarketing and paid Google Ads conversion tracking are not active.
Account and Community Features
Community accounts use Supabase Auth with email/password login. The public recipe pages can show display names, rating summaries, approved comments, and a visitor's own pending comments while signed in.
Comment moderation defaults to pending review before public display. Fake users, fake reviews, and fake aggregate ratings must not be published.
Signed-in users can use /account/ to review their profile, recent ratings, recent comments, consent records, and password settings. Full account deletion or privacy requests should still be sent to esseninnb@gmail.com.
Retention
Current localStorage data remains in the visitor's browser until the visitor clears browser storage or the app overwrites it.
Current server access logs are configured for roughly 30 days of rotation in the Nginx setup. Community account, rating, and comment data remains in Supabase until the user requests deletion, the owner moderates or removes it, or the community feature is retired.
Your Rights
Where GDPR applies, you may have rights to access, rectification, erasure, restriction, portability, objection, and withdrawal of consent.
You may also have the right to lodge a complaint with a competent data protection supervisory authority.
To request privacy help, email esseninnb@gmail.com. A competent supervisory authority should be identified later if the owner's jurisdiction or targeting makes that necessary.
Contact
For privacy questions, email esseninnb@gmail.com.