Privacy notice

Who we are

Smarrig is operated by Axel Adlercreutz, an individual sole trader based in Finland ("Smarrig", "we", "us"). We are the data controller for the personal data described in this notice. Questions or requests: hello@smarrig.com.

Personal data we collect and why

• Account data (email address, password credentials handled by our authentication provider, or Google sign-in identifiers, display name, username, avatar): to create and secure your account and identify you to other cooks. Legal basis: performance of our contract with you.
• Content you create (recipes, notes, saved recipes, follows, imported source links and photos you upload): to provide the service. Legal basis: performance of our contract.
• Usage and telemetry (pages and recipes viewed, a pseudonymous viewer identifier, language preference, device and browser information, IP address): to keep the service reliable, prevent abuse and fraud, and improve the product. Legal basis: legitimate interests.
• Support messages you send us: to answer you and keep a record of the issue. Legal basis: legitimate interests.
• Email delivery data (delivery, bounce and unsubscribe events): to send account emails you asked for and honour opt-outs. Legal basis: performance of our contract and legal obligation.

Who we share data with

• Service providers and subprocessors: hosting, database, storage, authentication, AI processing for recipe import and translation, and email delivery.
• Professional advisers such as legal and accounting, where needed.
• Authorities where we are required to do so by law.

Recipes you publish, your username, display name and avatar are public by design. Private recipes and personal notes are not shared with other users.

International transfers

Some of our providers process data outside the EEA and the UK. Where that happens we rely on European Commission adequacy decisions or on standard contractual clauses together with appropriate technical safeguards.

Retention

We keep account and content data for as long as your account exists. If you delete your account we delete or anonymise your personal data within 30 days, except where we must keep records longer for legal, tax or fraud-prevention reasons. Usage and telemetry data is kept in aggregated or pseudonymised form.

Your rights

Under the GDPR you may request access to your personal data, correction of inaccurate data, erasure, restriction of processing, portability, and you may object to processing based on legitimate interests. Where we rely on consent, you can withdraw it at any time. Contact us at hello@smarrig.com and we will respond within one month. You also have the right to complain to your local supervisory authority, in Finland the Office of the Data Protection Ombudsman.

Security

We apply appropriate technical and organisational measures, including encryption in transit, encrypted storage, row-level access controls in our database, and least-privilege access for administrators.

Cookies and local storage

We use strictly necessary cookies and local storage to keep you signed in, remember your language preference and hold unsaved recipe drafts. We do not use advertising cookies. You can clear or block cookies in your browser settings, though sign-in will not work without the necessary ones.