Privacy policy

I am Ricardo Fusco, based in Porto, Portugal, and I am the controller of personal data on Tacho Rapado. This policy covers the website, accounts, and recipe saving and cooking features.

You can read recipes without an account. Sharing statistics is optional and does not affect access to recipes or your account features.

Account and saved recipes

Account and saved recipes: I use your email, internal identifier, sign-in methods and selected recipes to provide the features you request. Passwords are stored as cryptographic hashes, not readable text. The legal basis is performance of the account service you request.

Your notes

Personal adaptations: I store substitutions and notes you choose to add to your account. They are not published, included in statistics or shared in prints. Avoid entering health information, sensitive information or other people’s data; this feature is for cooking notes.

Website security

Security and website delivery: hosting and network protection necessarily receive connection data such as IP addresses and technical request information. Authentication and abuse prevention protect accounts and website availability, based on the legitimate interest in keeping the service secure. These data do not feed optional statistics.

When you contact me

If you contact me, I use the information you send to respond and handle your request. Data protection rights requests are handled to meet legal obligations. You do not need to send identity documents unless they are necessary to verify your identity.

What you can allow

Essential only is the starting choice. With your consent, I can count views by page type (such as recipe or catalogue), language and day, and measure errors and speed on public pages. If you also choose actions, I can count use of cooking, sharing, printing, saving, search, filter and serving controls. These measurements help me understand which features are useful and where to improve the website.

Totals without an individual history

Statistics are first-party and immediately combined into daily totals. They contain no user or session identifiers, IP addresses, location, device information, recipe titles or identifiers, URLs, searches, form data or notes. I do not record screens or sessions, create individual profiles or link these counts to your account.

What is excluded

Account, saved-recipe, privacy, terms and editor pages are excluded from optional statistics and diagnostics. There is no behavioural advertising, sale of data or session recording. Consent does not authorise marketing or automated decisions about you. Diagnostics pass through my server: only page type, language, a speed measurement or error class and location in a public code file; never error messages, URLs, forms or content.

How to withdraw your choice

You can withdraw consent using the choices above, as easily as you give it. Withdrawal stops new collection and does not affect the lawfulness of earlier processing. Already combined totals do not allow an individual contribution to be identified or removed. I honour GPC and Do Not Track signals as requests to keep statistics off.

Signing in

I use first-party cookies needed for features you choose:

• tacho_session keeps you signed in for up to 30 days and is inaccessible to JavaScript.
• tacho_oauth binds Google sign-in to its return for up to 10 minutes.

They are sent securely over HTTPS and restricted across websites.

Browser preferences

• tacho_privacy stores only your chosen level, choice version and when you saved it, for 180 days. It is not a visitor identifier. A missing, invalid or expired choice switches statistics off.
• tacho_measurements remembers measurement units for up to one year.
• The private editor uses tacho_editor_language to remember its language for up to one year.

Your cooking session

Cooking uses tab storage for a previously public recipe, servings and progress so you can recover after refreshing. Finishing clears that progress; closing the tab normally clears this storage, although browsers may restore tabs. It contains no private notes or credentials. The ingredient list used to find recipes stays only in memory.

Sensitive actions and clearing data

A sensitive confirmation using Google may use temporary tab storage to resume the action you requested. You can clear cookies and site data in browser settings; this may sign you out or remove preferences and progress. I do not introduce an analytics identification cookie.

Account and saved recipes

Account data, sign-in methods and saved recipes remain while you keep your account. Deleting your account removes these data from the active database. Confirming removal of a saved recipe also deletes its personal adaptations. These actions are available in account settings and saved recipes.

Statistics and your choice

Counts remain in the active database for up to 90 UTC calendar days; cleanup runs when the service starts and hourly. I do not store individual usage events. Technical diagnostics and copies of totals in the monitoring dashboard remain in Grafana Cloud for up to 14 days; the local diagnostic queue is limited to two days. The consent preference lasts 180 days and then returns to essential only until a new choice.

Security and support

Verification codes expire after 10 minutes and sessions after at most 30 days; these periods limit use and are not a promise of immediate deletion of every technical record. Security records and support requests are retained only as necessary to prevent abuse, resolve the request, or establish and defend rights, taking legal obligations and ongoing incidents into account.

Backups

Encrypted backups can retain subsequently deleted data until replaced. Rotation keeps between three and seven verified recovery points, subject to storage limits, rather than a fixed number of days. Access is for recovery and security only. After restoration, deletion requests must be reapplied before the service resumes.

Hosting, protection and email

• Netcup: hosting in the European Union.
• Grafana Cloud: private monitoring dashboard in Germany, with server measurements, aggregate counts and filtered technical diagnostics. It receives no visitor IPs, cookies, credentials or private content. Operational records contain status, duration, route template and website version, to keep the service available.
• Cloudflare: traffic protection and delivery, with encrypted backups in EU R2 storage.
• Oracle Cloud Email Delivery: account messages, in the Madrid region.
• OVHcloud Zimbra: the project contact mailbox, to receive, store and reply to your messages.

These services may process technical data and, for email, addresses and content needed for communication. They do not receive events for behavioural analytics.

Google sign-in and external links

If you choose Google sign-in, Google handles authentication under its own policy. I receive the identity identifier and email needed for your account, not your Google password. Email and password sign-in remains available. External links lead to services with their own policies.

International transfers

A European server location does not guarantee that all support or processing by a global provider occurs in the EEA. International transfers of personal data must be covered by an applicable adequacy decision or other GDPR safeguards, such as standard contractual clauses and supplementary measures where needed. You can request information about recipients and safeguards actually applicable to your data.

What you can request

Where applicable, you can request access, correction, erasure, restriction, portability and object to processing based on legitimate interests. You can withdraw consent without losing website access. Some rights have legal limits; if I cannot fulfil a request, I will explain why.

How I respond

I respond without undue delay and normally within one month. If complexity or the number of requests justifies up to two additional months, I will tell you within the first month and explain why. I may request only information needed to verify your identity.

Complaining to an authority

You can complain to the Comissão Nacional de Proteção de Dados (CNPD) in Portugal, or the competent supervisory authority where you live or work. You do not have to contact me first to exercise that right.

The website is for a general audience and does not seek to collect children’s data. An adult should supervise account use and cooking activities by children. If you believe a child’s data were provided without necessary authorisation, contact me so I can assess and remove them where applicable.

I update this page when features or processing change. Changes requiring new consent do not extend an old choice: statistics stay off until a new informed choice. The date on this page identifies the policy version.