Privacy Policy
This Privacy Policy explains how Velvet ("we", "us") at velvetcookbook.com handles information about visitors. Last updated 2026-10-30.
Who we are
The controller for this site is Velvet (velvetcookbook.com). Contact: hello@velvetcookbook.com. For payments, Lemon Squeezy is a separate, independent controller (see below).
Information we collect
- Information you send us, for example when you email hello@velvetcookbook.com.
- Account data, if you create an account with your email address and a password, or sign in with Google: your email address, a user ID and, for email accounts, your password (stored only in hashed form; we cannot see it), stored with our sign-in and database provider (Supabase), together with your plan, subscription status and renewal dates and your Lemon Squeezy customer and subscription IDs. If you sign in with Google, we do not receive your Google password.
- Favourites: if you are signed in, the recipes you save as favourites are stored with your account (Supabase) so they sync across your devices.
- Preferences stored on your device (look, cookie choice and, when you are not signed in, favourites) in your browser's localStorage. They are not sent to us.
- Technical data such as IP address, browser type and pages viewed, collected by our hosting provider (Cloudflare) and by Google AdSense when ads load. We use Cloudflare Web Analytics, which does not use cookies or track you across sites.
- Payment data: payments are handled by Lemon Squeezy LLC, our merchant of record. Lemon Squeezy is an independent controller of your payment and tax data under its own privacy policy (https://www.lemonsqueezy.com/privacy). We receive your email, plan, status and renewal date. We do not see or store your full card details.
An email address is required to create an account; everything else is optional. We make no decisions about you by automated means that have legal or similarly significant effects.
Cookies and similar technologies
We use strictly necessary storage to make the site work and remember your choices. We do not use analytics cookies. Google's ad script loads with the page; whether Google uses ad cookies and shows personalised ads depends on your consent choice. See our Cookie Policy. You can change your choice at any time with "Cookie settings" in the footer.
Advertising (Google AdSense and other third parties)
We may show ads served by Google AdSense and other third-party vendors. These vendors, including Google, use cookies to serve ads based on your previous visits to this and other websites. Google's use of advertising cookies enables it and its partners to serve ads based on your visits to this and/or other sites. You can opt out of personalised advertising in Google Ads Settings or at www.aboutads.info. Personalised ads rely on a profile of your browsing; you can object to this or withdraw consent at any time with 'Cookie settings' in the footer. See also how Google uses data from partner sites. A consent tool for visitors in the EU/EEA, UK and Switzerland is being set up; until it is live, ads shown there are limited to Google's standard handling for those regions.
Analytics
We use Cloudflare Web Analytics, which does not use cookies or track you across sites, to count visits (pages visited, referrer, device type and approximate country). Because it uses no cookies, it does not depend on your cookie choice. We do not use any cookie-based analytics.
Legal bases (GDPR)
We process personal data on the basis of your consent (ad and personalisation cookies), our legitimate interests (running and securing the site, cookie-free visit counts, answering messages), and contract (your account, synced favourites and subscriptions).
Your rights (EU/EEA and UK visitors)
You have the right to access, correct, delete, restrict or object to processing of your personal data, the right to data portability, and the right to withdraw consent at any time without affecting earlier processing. You may also complain to your local data protection authority. To exercise your rights, email hello@velvetcookbook.com.
Deleting your data
To ask us to delete your personal data, email hello@velvetcookbook.com with the subject "Delete my data" and the email address you used with us. This deletes your account, your email address, your subscription status and your saved favourites from our database. Cancel any active subscription first (Account, then Manage subscription). We will confirm and act within 30 days. Preferences stored on your device (look, favourites, cookie choice) can be removed at any time by clearing this site's data in your browser. Subscription billing records held by our payment provider may need to be kept for tax law.
Sharing and international transfers
We share data only with service providers needed to run the site (Cloudflare, Inc. for hosting through Cloudflare Pages, content delivery, security and cookie-free visit counts with Cloudflare Web Analytics, acting as our processor under its data processing terms; see Cloudflare's privacy policy (https://www.cloudflare.com/privacypolicy/); Supabase for sign-in and account data, Google for sign-in, Resend to send sign-up confirmation and password reset emails, Lemon Squeezy for payments, and Google AdSense for advertising). Our providers are in the United States. Where they are certified under the EU-US Data Privacy Framework (and the UK Extension) we rely on that; otherwise on the European Commission's Standard Contractual Clauses included in their data processing terms. We do not sell your personal data.
Retention
- Account and favourites are kept until you delete your account, then erased within 30 days.
- Subscription records (plan, status, dates) are kept while subscribed, plus up to 6 years for tax and dispute purposes.
- Account emails are logged by Resend for its standard log period.
- Hosting, CDN and security logs are kept by Cloudflare for its standard periods.
- Emails you send us are kept as long as needed to answer them and handle any follow-up.
Children
This site is not directed at children under 16, and we do not knowingly collect their personal data. If you believe a child has given us personal data, contact hello@velvetcookbook.com and we will delete it.
Changes
We may update this policy. The date at the top shows the latest version.

