Privacy policy

Plassiette collects the bare minimum. Here is what happens with your data.

Who is responsible for your data

Plassiette
Sole trader (French micro-entrepreneur) — registration in progress
Contact: plassiette@proton.me

No account, on your device

Your settings (household size, meals, eating style) and your meal plan are saved in your browser's local storage. They don't leave your device, except as described below. You can delete them at any time by clearing this site's data.

Your account, if you create one

An account is optional: Plassiette works without one. If you create one, we store your email address, your password (encrypted, we never see it), your week of meals and whether your access is paid. Nothing else: no name, no card details. The “gluten-free” and “no pork” options stay on your device and are never sent: an intolerance is health data, and leaving out pork can reveal a religious belief.

This data is hosted by Supabase (servers in Paris) and is only used to recognize you and to find your week again on another device. It is never sold or shared. To delete your account and everything in it, write to plassiette@proton.me: it is done within 30 days.

Leftover reminders by email

If your full access is active and you're signed in to your account, you can say how much of a checked-off dish you ate. If some is left, we send you a single email the next day around 5 pm reminding you to finish it. To do this we use your account's email address and your weekly menu (the dish and the share left), and we keep the date of the last reminder and the list of meals already reminded. The share left is also counted, anonymously, in the audience measurement described below.

These reminders are part of the service you paid for. Every email has a link to unsubscribe, and you can also turn them off from your account page. Emails are sent through Resend (Resend, Inc.): your email address and the message content are processed there for sending and technical logs.

Audience measurement

To understand how Plassiette is used and make it better, we record anonymous statistics: pages viewed, the main steps of your visit (form started, week planned, recipe opened, offer shown, payment), your answers to the form (household size, meals, eating style, store, budget), the country site, your type of device and the site you came from (for example tiktok.com or a campaign link). We also measure how long you spend on each page, how far you scroll, which parts of the home page you see, the links to other sites you click, how fast the site loads and any technical errors, as well as your browser and operating system family (for example Safari on iPhone) and your browser language. The meals generated (dish name, ingredients, date, meal slot) may also be recorded.

This data is tied to a random ID created on your device and renewed after 13 months: it can't be used to identify you. It is hosted by Supabase in the European Union (Paris, France), kept for 25 months at most, and only used to produce statistics for Plassiette: it is never sold, combined with other data or used for advertising. We don't record your name, email, IP address, health data or allergies (the gluten-free and no-pork options aren't measured).

We also use Vercel Web Analytics, the statistics tool of our host, Vercel Inc. (United States). Without cookies, it counts page views with the page address, the site you came from, your approximate location (country, region, city), your device type, your operating system and your browser. Visitors are told apart by a fingerprint computed from the connection and deleted after 24 hours: it can't identify you. Opting out below turns this tool off too.

You can opt out at any time, right here:

Payments

Payments are handled entirely by Stripe, which acts as data controller for your payment data. Plassiette never sees or stores your card. Stripe sends us your email address and the amount paid, which we keep for 10 years.

Cookies

Plassiette doesn't use advertising cookies or third-party trackers. Local storage is used to make the site work (your meal plan, your access) and for the anonymous audience-measurement ID described above, which you can turn off. We don't sell or share your personal information.

Your rights

You can ask to access, correct or delete your data by writing to plassiette@proton.me. Plassiette is run from France: your data is protected under the EU General Data Protection Regulation (GDPR), and you can also contact the French data protection authority (cnil.fr).