Privacy

[DRAFT — to be reviewed by counsel before launch.]

Who is responsible

Frisch Gebacken, Vienna, Austria (see Impressum). EU data protection law (GDPR) applies to all our readers, wherever they live.

What we collect and why

• Email address — to send The Letter after you confirm. Basis: your consent. Unsubscribe anytime.
• Where you signed up and which gift you chose — to know which pages help people.
• Recipe card photos and family stories (Recipe Rescue) — to do the rescue. Shared publicly only at the level you choose. Deleted 12 months after delivery unless you chose to share the scan.
• Orders — handled by Lemon Squeezy, the seller of record, under its own terms.

Advertising (only if you opt in)

If you tick the optional box, we send a scrambled (SHA-256 hashed) version of your email to Meta and TikTok so they can show our ads to people like you and avoid showing you ads for things you already bought. Meta and TikTok act as joint controllers for this matching. Untick it any time in your preferences; we remove you from those audiences within 48 hours.

Who processes data for us

Vercel (hosting, EU region), Neon (database, EU region), our email platform, Lemon Squeezy (payments), Transkribus (reading old handwriting), Anthropic (AI assistance via its API), and — only with your consent — Meta and TikTok.

Your rights

Access, correction, deletion, objection and complaint to the Austrian Data Protection Authority (dsb.gv.at). Write to hello@frischgebacken.at.