Privacy policy

Plassiette collects the bare minimum. Here is what happens to your data.

Who is responsible for your data

Plassiette
Sole trader (French micro-entrepreneur) — registration in progress
Contact: plassiette@proton.me

No account, on your device

Your settings (number of people, meals, the way you eat) and your meal plan are saved in your browser’s local storage. They stay on your device, apart from what is described below. You can delete them at any time by clearing the site data.

Your account, if you create one

An account is optional: Plassiette works without one. If you create one, we store your email address, your password (encrypted, we never see it), your week of meals and whether your access is paid. Nothing else: no name, no card details. The “gluten-free” and “no pork” options stay on your device and are never sent: an intolerance is health data, and leaving out pork can reveal a religious belief.

This data is hosted by Supabase (servers in Paris) and is only used to recognise you and to find your week again on another device. It is never sold or shared. To delete your account and everything in it, write to plassiette@proton.me: it is done within 30 days.

Leftover reminders by email

If your full access is active and you're signed in to your account, you can say how much of a ticked-off dish you ate. If some is left, we send you a single email the next day around 5pm reminding you to finish it. To do this we use your account's email address and your weekly menu (the dish and the share left), and we keep the date of the last reminder and the list of meals already reminded. The share left is also counted, anonymously, in the audience measurement described below.

These reminders are part of the service you paid for. Every email has a link to unsubscribe, and you can also turn them off from your account page. Emails are sent through Resend (Resend, Inc., United States): your email address and the message content are processed there for sending and technical logs. This transfer outside the UK relies on the UK Extension to the EU–US Data Privacy Framework and on standard contractual clauses.

Audience measurement

To understand how Plassiette is used and improve it, we record anonymous statistics: pages viewed, the main steps of your visit (form started, week planned, recipe opened, offer shown, payment), your answers to the form (number of people, meals, the way you eat, supermarket, budget), the country site, your type of device and the site you came from (for example tiktok.com or a campaign link). We also measure how long you spend on each page, how far you scroll, which parts of the home page you see, the links to other sites you click, how fast the site loads and any technical errors, as well as your browser and operating system family (for example Safari on iPhone) and your browser language. The meals generated (dish name, ingredients, date, lunch or dinner) may also be saved.

This data is linked to a random ID created on your device and renewed after 13 months: it cannot identify you. It is hosted by Supabase in the European Union (Paris, France), kept for 25 months at most, and only used to produce statistics for Plassiette: it is never sold, combined with other data or used for advertising. We record no name, no email, no IP address, no health data and no allergies (the gluten-free and no-pork options are not measured).

We also use Vercel Web Analytics, the statistics tool of our host, Vercel Inc. (United States). Without cookies, it counts page views with the page address, the site you came from, your approximate location (country, region, city), your device type, your operating system and your browser. Visitors are told apart by a fingerprint computed from the connection and deleted after 24 hours: it can't identify you. The transfer to the United States relies on the UK Extension to the EU–US Data Privacy Framework. Opting out below turns this tool off too.

You can opt out at any time, right here:

Payment

Payment is handled entirely by Stripe, which is its own controller for your payment data. Plassiette never sees or stores your card. Stripe passes us your email and the amount paid, which we keep for 10 years.

Cookies

Plassiette uses no advertising cookies and no third-party trackers. Local storage is used to make the site work (your meal plan, your access) and for the anonymous audience-measurement ID described above, which you can turn off.

Your rights

Under the UK GDPR and the Data Protection Act 2018, you can ask for access to your data, or for it to be corrected or deleted, by writing to plassiette@proton.me. You can also complain to the Information Commissioner’s Office (ico.org.uk).