Privacy policy
Last updated: November 12, 2026
The German version of this document is legally binding; this translation is provided for convenience.
1. Controller
This privacy policy applies to the website dishfolio.net and the Dishfolio account on the web. The privacy policy included in the apps applies to them additionally. Controller: Gustav Gutsche Schlossplatz 1 66482 Zweibrücken Germany Email: mail@gustavgutsche.de
2. Visiting the website and hosting
The website is hosted by Vercel Inc. When you visit, Vercel processes technically necessary data such as IP address, time, requested address, browser type and error messages in order to deliver the site and protect it from abuse. The legal basis is our legitimate interest in secure and stable operation (Art. 6(1)(f) GDPR). Data may be processed in the USA. The website uses no advertising or analytics cookies. Only technically necessary information is stored: your language choice and, when you sign in, your session in the browser.
3. Account and sign-in
For the account we process your email address, display name, a technical user identifier and sign-in status information. Sign-in is provided by Firebase Authentication (Google) with email and password, or through Apple or Google. The account is the same one as in the app. The legal basis is performance of a contract (Art. 6(1)(b) GDPR).
4. Private recipes and sync
With Dishfolio Plus your private recipes and images are synced between your devices through Google Firebase (Cloud Firestore, Cloud Storage, Cloud Functions; stored in the EU) and can be viewed on the web in your account. Only you have access. When a subscription ends, neither local nor stored cloud recipes are deleted.
5. Community and public recipe pages
When you submit a recipe to the community we store a separate version with the recipe text, images, source and your display name. Private notes are not included. After approval by moderation this version is available to members in the app and publicly on dishfolio.net without sign-in, and may be indexed by search engines. If you remove the publication or delete your account, the public page is removed; copies in search engine caches and in other members' private collections may remain temporarily or permanently. Saved community recipes and reports are linked to your account.
6. Purchases and payment processing
A subscription purchased on dishfolio.net is processed by Stripe Payments Europe, Ltd. (Ireland). Stripe processes your payment details, email address, billing information and technical data for fraud prevention as an independent controller; data may be transferred to the USA. Dishfolio never receives full card or bank details. We store the Stripe customer number, subscription identifier, selected plan, status and term in order to link access to your account (Art. 6(1)(b) GDPR). We retain billing records for the statutory periods (Art. 6(1)(c) GDPR). Subscriptions purchased on the App Store are processed by Apple. We process the product identifier, transaction identifiers, term and status to verify access.
7. Technical protection
To protect against abusive requests, the website may use Firebase App Check with reCAPTCHA (Google). Technical browser and device information is transmitted to Google. On the server we keep account-related usage counters for requests and storage. The legal basis is Art. 6(1)(f) GDPR.
Notices about content
When you report an infringement through the “Report content” form, we process your name, email address, optional details about the company and the original, and your explanation in order to review the notice, decide on it and inform you. To protect against abusive mass notices, a daily-rotating short value that cannot be reversed is derived from your IP address; we do not store the IP address itself. The legal basis is our statutory obligations as a provider (Art. 6(1)(c) GDPR in conjunction with Art. 16 of the Digital Services Act) and our legitimate interest in preventing infringements (Art. 6(1)(f) GDPR). We keep notices as a record for up to three years.
8. Contact
When you contact us by email we process your message, your sender address and the information you provide in order to answer it.
9. Recipients and international transfers
We use Google (Firebase), Vercel and Stripe as service providers; Apple is involved when you sign in with Apple or purchase on the App Store. These providers may process data outside the EU, in particular in the USA. Transfers rely on the applicable safeguards, such as the EU–US Data Privacy Framework or standard contractual clauses.
10. Retention and deletion
We store account data and content for as long as you use the account. You can start deletion in your account; this removes private recipes, images, publications, saved recipes and the subscription status, and ends a subscription running through Stripe. Backups may persist for up to seven days. Statutory retention obligations remain unaffected.
11. Your rights
Subject to the legal requirements you have the right of access, rectification, erasure, restriction of processing, data portability and objection, as well as the right to withdraw consent. Contact mail@gustavgutsche.de. You may also lodge a complaint with a data protection supervisory authority.