Privacy Policy — DishFare

Who we are

DishFare is operated by Mary Ruddy, trading as DishFare, based in Dingle, Co. Kerry, Ireland. For the purposes of data protection law, we are the data controller for information collected through this platform.

If you have any questions about this policy or how we handle your data, contact us at hello@dishfare.com.

What data we collect and why

If you browse DishFare without an account

We collect no personal data. You can search, browse recipes, and use the WhatsApp share buttons without creating an account or giving us anything. We do collect anonymous usage data — pages visited, searches made, recipes clicked — to understand how the platform is being used. This data cannot be linked back to you personally.

If you register as a cook

Your name and email address (required to create your account)
An optional profile photo, if you choose to upload one
Your appliance preferences (e.g. "I have an air fryer"), if you choose to set them
Your saved recipe collections, likes, and saves

We use this information to personalise your experience and to send notifications you've opted into. We do not use it for advertising, and we do not sell it to anyone.

If you register as a food blogger

Your name, email address, and blog URL
Your profile photo (optional)
Your blog content, ingested automatically from your site's public sitemap — the same content you have published on your own blog
Analytics data about how cooks interact with your recipes on DishFare

If you contact us

Your name, email address, and the contents of your message.

Profile photos

Cook profile photos are stored securely in our database. You can update or delete your photo at any time from your account settings. If you delete your account, your photo is deleted with it.

We do not store photos of food bloggers — blogger profile images are linked from your own blog and remain hosted there. Most people choose not to use a real photo of themselves as their cook profile picture, and that's absolutely fine.

Cookies and tracking

DishFare uses only the cookies necessary to keep you logged in and to remember your preferences. We do not use advertising cookies, tracking cookies, or third-party analytics that identify you personally.

We may use Vercel's built-in analytics to understand aggregate platform usage (page load times, traffic volumes). This data is anonymised and not linked to individual users.

How we store your data

Your data is stored securely using Supabase, a hosted database platform with servers in the European Union. Data is encrypted in transit and at rest. We do not transfer your personal data outside the EEA.

How long we keep your data

We keep your data for as long as your account is active. If you delete your account, your personal data (name, email, photo, saved collections) is deleted within 30 days. Anonymised usage data (searches, clicks) may be retained in aggregate form as it cannot be linked back to you.

Your rights under GDPR

Because we operate from Ireland within the EU, you have the following rights:

Right of access — you can ask us what data we hold about you
Right to rectification — you can ask us to correct inaccurate data
Right to erasure — you can ask us to delete your data ("right to be forgotten")
Right to restriction — you can ask us to limit how we use your data
Right to data portability — you can ask us to provide your data in a portable format
Right to object — you can object to how we process your data

To exercise any of these rights, email us at hello@dishfare.com. We will respond within 30 days.

If you are unhappy with how we handle your data, you have the right to lodge a complaint with the Data Protection Commission (Ireland) at dataprotection.ie.

Third-party services

Supabase — database and authentication (supabase.com/privacy)
Vercel — hosting and performance (vercel.com/legal/privacy-policy)
MailerLite — email notification service (mailerlite.com/privacy). Used to send platform notifications to registered users who have opted in. We do not use this for advertising.
Payment processor — when billing begins, payments will be processed by a PCI-compliant third-party payment provider. Details will be added here before billing commences.
WhatsApp — the share buttons use WhatsApp's wa.me service. When you tap these buttons, you are directed to WhatsApp. We do not collect your phone number or any WhatsApp data.

Changes to this policy

If we make significant changes to this policy, we will notify registered users by email. The "last updated" date at the top of this page will always reflect the most recent version.