Privacy and cookie policy
This policy explains how your personal data is processed when you use the website vegamecum.com and the mobile apps “Vegamecum – Vegan Recipes” (together, “Vegamecum”), which cookies and similar technologies are used, and how you can exercise your rights.
1. Data controller
- Trade name: Vegamecum
- Owner: Nerea Agudo Mateos
- Tax ID: 77122710-F
- Address: c/ Lluís Domènech i Montaner 5, esc. B, 3º 2ª, 08950 Sant Joan Despí (Barcelona), Spain
- Email: vegamecum@gmail.com
2. Applicable law
Regulation (EU) 2016/679 (General Data Protection Regulation, GDPR), Spanish Organic Law 3/2018 on Personal Data Protection and Digital Rights (LOPDGDD) and Spanish Law 34/2002 on Information Society Services (LSSI).
3. What data we process and why
| Data | Purpose | Legal basis |
|---|---|---|
| Anonymous user identifier created when you open the website or the app | Saving your favourites, shopping list, calendar, meal plan, alarms and settings, and syncing them across devices | Performance of the service you request (Art. 6(1)(b) GDPR) |
| If you link an account: email address, name and profile picture provided by Google, Apple or Facebook, or the email and password you choose | Identifying you and restoring your data on other devices | Performance of the service (Art. 6(1)(b) GDPR) |
| Content you publish: comments on recipes and in the chat, ratings, your own recipes and the images you upload, translation proposals | Showing it to other users. Published comments and recipes are publicly visible together with your name | Performance of the service (Art. 6(1)(b) GDPR) |
| Notification token of your device or browser | Sending you cooking alarm and new recipe notifications, if you enable them | Consent (Art. 6(1)(a) GDPR), requested when you enable notifications |
| Purchases of extras and subscriptions (product and order identifiers; payment is handled by Google Play or the App Store, we never see your payment details) | Unlocking the extras you have bought | Performance of the service (Art. 6(1)(b) GDPR) |
| Usage and device data (screens viewed, recipes opened, language, model, operating system, approximate location from IP) through Google Analytics for Firebase | Statistics to improve Vegamecum | Consent (Art. 6(1)(a) GDPR) |
| Advertising identifiers, cookies and browsing data used by Google AdSense (website) and Google AdMob (app) | Showing ads, personalised or not depending on your choice, measuring their performance and preventing fraud | Consent (Art. 6(1)(a) GDPR). Non-personalised ads and fraud prevention may rely on legitimate interest (Art. 6(1)(f) GDPR) |
| Messages you send us by email or through in-app support | Replying to you | Consent and legitimate interest in handling your request (Art. 6(1)(a) and (f) GDPR) |
We do not process special categories of data or make automated decisions with legal effects on you. Vegamecum is not directed at children under 14 (Art. 7 LOPDGDD).
4. Recipients and processors
We do not sell your data. To provide the service we use the following providers, which process data on behalf of Vegamecum or, for advertising, as independent controllers:
- Google Ireland Ltd. / Google LLC: Firebase (sign-in, database, image storage, cloud functions, web hosting, notifications, Remote Config and Analytics), Google AdSense, Google AdMob, Google Play and Sign in with Google. Google Privacy Policy · Privacy in Firebase · How Google uses information from sites that use its services.
- Apple Distribution International Ltd.: Sign in with Apple and App Store purchases.
- Meta Platforms Ireland Ltd.: Facebook Login, only if you choose it.
- Google’s advertising partners: on the website, if you accept it in the consent message, third-party ad vendors may use cookies. You can see the list and choose in that message.
Some of these providers may process data outside the European Economic Area, in particular in the United States. Such transfers rely on the EU-U.S. Data Privacy Framework, to which they are certified, or on the European Commission’s standard contractual clauses.
5. Cookies and similar technologies
The website and the apps use local browser or device storage and cookies. Advertising and analytics are only enabled with your consent, which we ask for in a message when you visit the website (managed by Google, an IAB Europe certified consent management platform).
| Type | Purpose | Who | Duration |
|---|---|---|---|
| Technical (local storage, IndexedDB) | Keeping your anonymous session, your settings and a copy of the recipes for faster loading. Necessary, no consent required | Vegamecum (Firebase) | Until you clear the site data |
Consent preferences (e.g. FCCDCF, FCNEC) | Remembering your cookie choice | Up to 13 months | |
Analytics (e.g. _ga, _ga_*) | Usage statistics | Google Analytics | Up to 2 years |
Advertising (e.g. __gads, __gpi, __eoi, IDE, DSID) | Showing and measuring ads, limiting repetition and preventing fraud | Google AdSense and its partners | Up to 13 months |
How to change your choice: on the website, from Privacy (“Manage cookies” button). You can also delete or block cookies in your browser. For Google personalised advertising: Google My Ad Center. In the apps: Settings → Privacy, and your phone’s advertising settings (reset or delete the advertising ID).
6. Retention
We keep your account data while you use it. If you delete your account or ask us to erase it, it is deleted within 30 days, except for what we must keep by law. Analytics data is kept according to the Google Analytics settings, for a maximum of 14 months. Cookies, as shown in the table above.
7. Your rights
You may exercise your rights of access, rectification, erasure, objection, restriction of processing and data portability, and withdraw your consent at any time without affecting the lawfulness of prior processing. Write to vegamecum@gmail.com or by post to the address in section 1, stating the right you are exercising. If needed to identify you, we will ask for proof of identity. We will reply within one month.
If you believe we have not handled your request properly, you may lodge a complaint with the Spanish Data Protection Agency (AEPD) (C/ Jorge Juan 6, 28001 Madrid) or with the supervisory authority of your country.
8. Security
Data is transmitted encrypted (HTTPS) and stored on Google Firebase infrastructure, with access rules that prevent users from reading other users’ private data. No system is infallible, but we take reasonable measures to protect your information.
9. Changes to this policy
We may update this policy to reflect changes in Vegamecum or in the law. We will publish the new version here with its date and, if the changes are significant, let you know on the website or in the app.