Privacy
Draft for the founder and counsel. This is the notice of the public alpha (the hosting design's §8.5 as ADR 0004 and ADR 0005 §10 amend it). It is not final until the founder names the controller and an address for questions about your data, and counsel has read it (hosting gate G1).
Who is responsible
What To Eat is a public alpha: anyone can use it, with or without an account; search engines and other crawlers may list its pages. What To Eat is run by BeatFrame 2026, a non-commercial project, not a company. Write to hi@beatframe.io about your data or anything else. Its legal details will be added here before it becomes a commercial product (decision D14).
What the board keeps, and where
- On this device: only the cookies the board needs to work. A session cookie (__Host-wte_s) holds a random id while the tab is open. If you switch memory on, a pseudonymised and encrypted cookie (__Host-wte_m) keeps your picks, area and dislikes on this device for 7 days, or 24 hours unused. If you sign in, an account cookie (__Host-wte_session) keeps you signed in. If you say no to something, a cookie (__Host-wte_c) remembers the no for 6 months, so we do not ask again. Your browser settings can block all of them.
- Nothing else in your browser: no local storage, no tracking, no third-party scripts, fonts or images, and no advertising.
- On our server: your picks and what you report (cooked, ordered, eaten) as pseudonymised, encrypted records; consent choices; and, if you sign up, your e-mail address. During the alpha, account and usage data sit in one database.
- Your filters (cuisines, diets, allergens) are sent with each request and never stored.
Who processes it
- Hetzner hosts the server in Helsinki, Finland, under a data processing agreement.
- Resend (United States) sends the sign-in codes and, if you switch it on, the daily reminder: it receives your address and the code or the link, keeps them for 30 days (and 7 days of backups), under standard contractual clauses and the EU-US Data Privacy Framework.
- MET Norway sends us weather forecasts for the city; it receives no data about you.
How long
- Without an account: your picks and reports live with your session and are deleted after 24 hours; with memory switched on, the cookie on your device keeps them for 7 days.
- With an account: raw picks and reports for 90 days, then only a summary of your taste, kept 12 months.
- Server logs: 30 days; security logs: 90 days.
- Encrypted backups: up to 30 days, on the server (7 days) and on the founder's computer.
- The consent ledger: as long as the law asks (it records what you agreed to and when).
Alpha caveats
Support is best effort. Recipes and allergen information are test versions, labelled as such on the board: check allergens yourself. If the server fails, we restore a backup, which can lose your most recent changes; after a restore we ask you to check your allergen exclusions and your consent choices again. Backups are kept on the server and on the founder's computer, not yet with a second provider.
Your rights
You can ask for a copy of your data or for its erasure by e-mail; we answer within a month, with the tools built for it. Erasure removes your account and destroys its encryption keys, and stays in force if a backup is restored. You can withdraw any consent in one tap on the board.
You must be 16 or older to use What To Eat.