Privacy Policy

Who we are

Fold It In is a community recipe site operated by Alistair Crawford, a sole trader based in the United Kingdom. Our website address is folditin.co.uk.

For any privacy questions or to exercise your rights, contact us at [email protected].

What data we collect

• Account data: email address, display name, and optional bio - collected when you sign in via magic link.
• Recipe content: recipes, ingredients, steps, and images you upload.
• Interactions: ratings, comments, saves, and follow relationships.
• Session data: a database session token to keep you signed in (essential cookie).
• Usage: cookie-free, aggregate analytics (page views, referrers) via self-hosted Umami. No cookies, no cross-site tracking, and no personal data is collected for this.

Lawful basis

We process your data on the basis of contract (to provide the service you signed up for) and legitimate interests (to prevent abuse and maintain platform integrity).

Data retention

Your data is retained for as long as your account is active. When you delete your account, your personal data, recipes, comments, ratings, and uploaded files are permanently deleted within 30 days. This window allows routine encrypted backups to rotate out; backups are never restored except to recover from a system failure.

Your rights

• Access: request a copy of your data via Settings → Export data.
• Deletion: delete your account and all associated data via Settings → Delete account.
• Rectification: update your name and bio at any time in Settings.
• Portability: your exported data is provided in JSON format.
• Complaints: you may lodge a complaint with the Information Commissioner's Office (ico.org.uk) if you believe we have mishandled your data.

Third-party services

• Resend - transactional email delivery. Your email address is shared with Resend only to send magic-link sign-in emails and recipe share invites.
• Cloudflare R2 - image and video storage. Uploaded files are stored in Cloudflare R2. Cloudflare processes this data under its data processing agreement, with standard contractual clauses governing any transfer outside the UK and EEA.
• Umami - self-hosted, cookie-free analytics (page views and referrers only). We run our own instance; no data is shared with a third party.

Cookies

We use one essential cookie: a session token to keep you signed in. You cannot opt out of the session cookie while signed in. Our analytics (Umami) does not use cookies and does not track you across sites.