Privacy Policy

Planet Bites privacy policy for foodmlover.com — how we handle data, ads, analytics, and email on this home-cooking site.

Privacy Policy

Planet Bites · foodmlover.com

Last Updated: April 2026

1. Introduction

Planet Bites (“we,” “our,” or “us”) is the name of the site and project behind foodmlover.com (the “Service”). The Service offers real recipes from a home cook — primarily Chinese home cooking (recipes and techniques). This Privacy Policy explains how we collect, use, and disclose personal data when you use Planet Bites / the Service, and what choices you have.

By using our Service, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

We collect several types of information to provide and improve our Service. The following sections detail the specific categories of data we collect:

2.1 Automatically Collected Information

When you visit our website, we automatically collect certain technical and usage information about your device and browsing behavior:

Technical Information:

  • IP Address: Your Internet Protocol (IP) address, which may be used to determine your approximate geographic location
  • Browser Information: Browser type, version, language settings, and installed plugins
  • Device Information: Device type (desktop, mobile, tablet), operating system, screen resolution, and device identifiers
  • Network Information: Internet service provider (ISP), connection type, and network speed

Usage and Behavioral Data:

  • Page Views: Which pages you visit, the order in which you visit them, and how long you spend on each page
  • Click Patterns: What links and buttons you click, and your navigation path through the website
  • Referral Sources: The website or search engine that referred you to our site
  • Search Queries: Any search terms you enter on our website
  • Error Logs: Technical errors you may encounter while using our website

Cookies and Tracking Technologies:

  • Session Cookies: Temporary cookies that expire when you close your browser
  • Persistent Cookies: Cookies that remain on your device for a set period or until you delete them
  • Web Beacons: Small invisible images used to track page views and email opens
  • Local Storage: Data that may be stored locally in your browser by your browser or third-party scripts (for example, advertising or analytics), as described in their respective policies

2.2 Information You Provide Voluntarily

We may collect information that you voluntarily provide to us through various interactions:

Contact Information:

  • Email Address: When you contact us via email or contact form
  • Name: If you provide your name when contacting us
  • Phone Number: If you provide it for customer support purposes

User-Generated Content:

  • Feedback and Comments: Any feedback, comments, or suggestions you submit

Communication Records:

  • Email Correspondence: Copies of emails you send to us
  • Support Tickets: Records of support requests and our responses

2.3 Information Collected Through Third-Party Services

We also receive information from third-party services we use:

Email newsletter (Buttondown):

  • If you join our mailing list, Buttondown receives your email address (and any fields you submit on the signup form) to deliver messages and manage subscriptions. Their handling of that data is governed by Buttondown’s policies in addition to this notice.

Google AdSense:

  • Advertising Identifiers: Unique identifiers used for ad targeting
  • Ad Interaction Data: Which ads you view or click
  • Interest Categories: Inferred interests based on your browsing behavior
  • Demographic Information: Age range, gender (if available)

Analytics Services:

  • Aggregated Usage Statistics: Overall website usage patterns
  • Traffic Sources: Where our visitors come from
  • Popular Content: Which pages and content are most viewed

3. How We Use Your Information

We use the collected information for the following purposes:

  • To Provide and Maintain Our Service: Ensure the website functions properly and deliver content
  • To Improve User Experience: Analyze how users interact with our website to improve navigation and content
  • To Analyze Website Traffic: Understand user behavior and preferences
  • To Serve Relevant Advertisements: Display personalized ads through Google AdSense
  • To Communicate with You: Respond to your inquiries and provide customer support
  • To Ensure Security: Detect and prevent fraud, abuse, or security issues

4. Data Storage and Retention

4.1 Storage Location

Your data is stored and processed in the following locations:

Primary Storage:

  • Website Hosting: Our website is hosted on servers that may be located in various countries, including but not limited to the United States, European Union, and Asia-Pacific regions
  • Content Delivery Networks (CDN): We use CDN services to deliver content quickly, which may cache your data temporarily in multiple geographic locations

Third-Party Storage:

  • Google AdSense: Data collected by Google AdSense is stored on Google’s servers, primarily in the United States, but may also be stored in other countries where Google operates data centers
  • Email Services: Email communications are stored on our email service provider’s servers

Local Storage:

  • Browser Storage: Third-party services (such as advertising) may store data locally in your browser as described in their privacy policies. We do not provide first-party dish favorites or star ratings on this site.

4.2 Data Retention Periods

We retain different types of data for different periods:

Automatically Collected Data:

  • Server Logs: Retained for up to 90 days for security and troubleshooting purposes
  • Analytics Data: Aggregated and anonymized data may be retained indefinitely for statistical purposes
  • Cookies: Session cookies expire when you close your browser; persistent cookies expire based on their specific purpose (typically 30 days to 2 years)

User-Provided Data:

  • Contact Information: Retained for up to 3 years after your last contact with us, unless you request earlier deletion
  • Email Correspondence: Retained for up to 2 years for customer support purposes
  • User Preferences: Retained until you delete them or clear your browser data

Third-Party Data:

  • Google AdSense Data: Retained according to Google’s privacy policy (typically up to 24 months)
  • Advertising Data: Retained for up to 13 months for advertising purposes

Legal Requirements:

  • We may retain certain data longer if required by law, legal process, or regulatory requirements
  • We may retain data longer if necessary to resolve disputes, enforce agreements, or protect our legal rights

4.3 Data Deletion

  • Automatic Deletion: Data is automatically deleted after the retention period expires
  • Requested Deletion: You may request deletion of your personal information at any time by contacting us at [email protected]
  • Deletion Process: Upon receiving a deletion request, we will delete your data within 30 days, unless legal obligations require us to retain it longer
  • Local Storage: You can delete locally stored data by clearing site data, cookies, and storage in your browser settings

5. Third-Party Services

5.1 Google AdSense

This website uses Google AdSense, an advertising service provided by Google LLC (“Google”). This section provides detailed information about how Google AdSense collects and uses your data.

What Data Google AdSense Collects:

Personal Identifiers:

  • Advertising ID: Unique identifiers used to track your interests and show relevant ads
  • Cookie ID: Unique identifiers stored in cookies to recognize your browser
  • Device ID: Device identifiers that help deliver ads to the right device

Browsing Data:

  • Pages Visited: Which pages you visit on our website and other websites
  • Ad Interactions: Which ads you view, click, or interact with
  • Time Spent: How long you spend on pages with ads
  • Referral Sources: How you arrived at pages with ads

Inferred Data:

  • Interest Categories: Categories inferred from your browsing behavior (e.g., “Food & Cooking,” “Travel”)
  • Demographic Information: Estimated age range and gender (if available)
  • Location Data: General geographic location based on IP address (typically city-level, not precise)

Technical Data:

  • Browser Information: Browser type, version, and settings
  • Device Information: Device type, operating system, screen size
  • Network Information: IP address, ISP, connection type

How Google AdSense Uses Your Data:

Advertising Purposes:

  • Personalized Ads: Show you ads that are more relevant to your interests
  • Ad Targeting: Match ads to your inferred interests and demographics
  • Ad Frequency Capping: Limit how often you see the same ad
  • Ad Measurement: Measure the effectiveness of ads

Analytics and Reporting:

  • Traffic Analysis: Analyze website traffic patterns
  • Performance Metrics: Measure ad performance and revenue
  • Audience Insights: Understand our audience demographics and interests

Data Sharing:

  • Google may share your data with:
    • Advertisers and advertising networks
    • Analytics providers
    • Google’s partners and service providers
    • Law enforcement (when legally required)

Google’s Privacy Policy:

Data Retention:

  • Google retains advertising data for up to 24 months
  • Some data may be retained longer for legal or security purposes
  • You can request deletion of your Google advertising data through Google’s Privacy Tools

Your Control Options:

Opt-Out of Personalized Advertising:

Disable Cookies:

  • Adjust your browser settings to block or delete cookies
  • Note: Blocking cookies may affect website functionality and ad relevance

Delete Your Data:

Legal Basis:

  • We use Google AdSense based on your consent (via our cookie consent banner)
  • You can withdraw consent at any time through the methods described above

5.2 Newsletter provider (Buttondown)

Optional email updates are sent through Buttondown. When you subscribe, Buttondown processes your subscription data to send messages and honor unsubscribe requests. Review their terms and privacy documentation on buttondown.com. You can leave the list at any time using the link in any email we send through that service.

5.3 Other third-party services

We may use other third-party services for analytics, hosting, and website functionality. These services have their own privacy policies governing data collection and use.

6. Cookies and Tracking Technologies

6.1 Types of Cookies We Use

  • Essential Cookies: Required for the website to function properly
  • Analytics Cookies: Help us understand how visitors interact with our website
  • Advertising Cookies: Used to deliver relevant advertisements

You can control and manage cookies in several ways:

  • Browser Settings: Most browsers allow you to refuse or accept cookies. You can also delete cookies that have already been set
  • Cookie Consent: We provide a cookie consent banner that allows you to accept or reject non-essential cookies
  • Third-Party Opt-Out: Use the opt-out links provided in Section 5.1

7. Your Rights and Choices

You have comprehensive rights regarding your personal information. Below is a detailed explanation of each right and how to exercise it:

7.1 Right to Access

What it means: You have the right to request access to the personal information we hold about you.

What you can request:

  • A copy of all personal data we have collected about you
  • Information about how we use your data
  • Information about who we share your data with
  • The purposes for which we process your data

How to exercise: Send an email to [email protected] with the subject line “Data Access Request” and include:

  • Your name
  • Email address associated with your account (if applicable)
  • Description of the data you want to access

Response time: We will respond within 30 days of receiving your request.

7.2 Right to Rectification (Correction)

What it means: You have the right to request correction of inaccurate or incomplete personal information.

What you can request:

  • Correction of incorrect personal information
  • Completion of incomplete information
  • Update of outdated information

How to exercise: Send an email to [email protected] with:

  • Details of the information you want corrected
  • Correct information
  • Proof of identity (if required)

Response time: We will correct your information within 30 days of receiving your request.

7.3 Right to Erasure (Deletion)

What it means: You have the right to request deletion of your personal information in certain circumstances.

When you can request deletion:

  • The data is no longer necessary for the purposes for which it was collected
  • You withdraw consent and there is no other legal basis for processing
  • You object to processing and there are no overriding legitimate grounds
  • The data has been unlawfully processed
  • The data must be erased to comply with a legal obligation

How to exercise: Send an email to [email protected] with the subject line “Data Deletion Request” and specify:

  • What data you want deleted
  • Reason for deletion request

Response time: We will delete your data within 30 days, unless legal obligations require us to retain it.

Note: Data stored locally in your browser by third-party scripts can often be removed by clearing site data, cookies, and storage in your browser settings.

7.4 Right to Restrict Processing

What it means: You have the right to request that we limit how we process your personal information.

When you can request restriction:

  • You contest the accuracy of your data
  • Processing is unlawful and you prefer restriction to deletion
  • We no longer need the data but you need it for legal claims
  • You have objected to processing pending verification

How to exercise: Send an email to [email protected] with the subject line “Processing Restriction Request.”

7.5 Right to Data Portability

What it means: You have the right to receive your personal data in a structured, commonly used, and machine-readable format.

What you can request:

  • A copy of your personal data in a portable format (e.g., JSON, CSV)
  • Transfer of your data directly to another service provider (where technically feasible)

How to exercise: Send an email to [email protected] with the subject line “Data Portability Request” and specify:

  • The format you prefer
  • Whether you want direct transfer to another service

7.6 Right to Object

What it means: You have the right to object to certain types of data processing.

What you can object to:

  • Processing based on legitimate interests
  • Direct marketing
  • Processing for statistical purposes

How to exercise: Send an email to [email protected] with the subject line “Objection to Processing” and specify what processing you object to.

For advertising: You can opt out of personalized advertising by:

What it means: If we process your data based on consent, you can withdraw that consent at any time.

How to exercise:

  • For cookies: Use our cookie consent banner or browser settings
  • For other consent-based processing: Send an email to [email protected]

Effect: Withdrawing consent does not affect the lawfulness of processing before withdrawal.

7.8 How to Exercise Your Rights

To exercise any of these rights, please contact us:

  • Email: [email protected]
  • Subject Line: Specify which right you want to exercise (e.g., “Data Access Request”)
  • Include: Your name, email address, and details of your request
  • Response Time: We will respond within 30 days

Verification: We may need to verify your identity before processing certain requests to protect your privacy.

No Fee: Exercising your rights is free of charge, unless requests are manifestly unfounded or excessive.

8. Data Security

We take data security seriously and implement comprehensive technical and organizational measures to protect your personal information. This section details our security practices.

8.1 Technical Security Measures

Encryption:

  • HTTPS/TLS: All data transmitted between your browser and our servers is encrypted using Transport Layer Security (TLS) encryption
  • SSL Certificates: We use valid SSL certificates to ensure secure connections
  • Encrypted Storage: Sensitive data stored on our servers is encrypted at rest

Access Controls:

  • Authentication: Access to personal data requires proper authentication
  • Authorization: We implement role-based access controls to limit who can access what data
  • Access Logging: We log all access to personal data for security auditing

Network Security:

  • Firewalls: We use firewalls to protect our servers from unauthorized access
  • Intrusion Detection: We monitor for suspicious activity and potential security threats
  • DDoS Protection: We have measures in place to protect against distributed denial-of-service attacks

System Security:

  • Regular Updates: We keep our systems and software up to date with security patches
  • Vulnerability Scanning: We regularly scan for security vulnerabilities
  • Secure Configuration: Our servers are configured according to security best practices

8.2 Organizational Security Measures

Staff Training:

  • Our staff receive training on data protection and security practices
  • Staff are required to follow strict security protocols
  • Access to personal data is limited to staff who need it for their job functions

Data Handling Procedures:

  • We have documented procedures for handling personal data securely
  • Personal data is only accessed when necessary for legitimate business purposes
  • We regularly review and update our data handling procedures

Incident Response:

  • We have procedures in place to respond to security incidents
  • In the event of a data breach, we will notify affected users and relevant authorities as required by law
  • We conduct post-incident reviews to improve our security measures

8.3 Third-Party Security

Service Provider Security:

  • We only work with third-party service providers who implement appropriate security measures
  • We require our service providers to comply with data protection standards
  • We regularly review our service providers’ security practices

Google AdSense Security:

  • Google implements industry-standard security measures for AdSense data
  • Google’s security practices are detailed in Google’s Security Practices

8.4 Security Limitations

No Absolute Security:

  • While we implement comprehensive security measures, no method of transmission over the Internet or electronic storage is 100% secure
  • We cannot guarantee absolute security of your personal information
  • You should also take steps to protect your own data (e.g., using strong passwords, keeping your browser updated)

Security Breaches:

  • In the unlikely event of a security breach, we will:
    • Investigate the breach immediately
    • Take steps to mitigate the impact
    • Notify affected users as required by law
    • Report to relevant data protection authorities if required

Your Role in Security:

  • Use strong, unique passwords if you create an account
  • Keep your browser and operating system updated
  • Be cautious when sharing personal information online
  • Report any security concerns to us immediately

8.5 Security Contact

If you have concerns about data security or suspect a security breach, please contact us immediately at [email protected] with the subject line “Security Concern.”

9. Children’s Privacy

Our Service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately. If we become aware that we have collected personal information from a child under 13, we will take steps to delete such information.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from those in your country. By using our Service, you consent to the transfer of your information to these countries.

Our Service may contain links to third-party websites. We are not responsible for the privacy practices or content of these external websites. We encourage you to review the privacy policies of any third-party websites you visit.

12. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by:

  • Posting the new Privacy Policy on this page
  • Updating the “Last Updated” date at the top of this Privacy Policy
  • Sending you an email notification (if applicable)

You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

13. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us using the following information:

Primary Contact:

  • Email: [email protected]
  • Subject Line: Please include “Privacy Policy Inquiry” or specify your request type (e.g., “Data Access Request,” “Data Deletion Request”)
  • Response Time: We typically respond within 24-48 hours, and will respond to data subject requests within 30 days as required by law

What to Include in Your Email:

  • Your name and contact information
  • Description of your question or request
  • If requesting data access or deletion, please specify what data you’re referring to
  • Any relevant details that will help us assist you

Alternative Contact Methods:

  • Contact Form: Use our Contact Page for general inquiries
  • Postal Address: (If you need to send physical documents, please email us first to obtain our mailing address)

14. Data Protection Officer and Responsible Party

Data controller: Planet Bites (operating foodmlover.com) is the data controller responsible for the processing of your personal information in connection with this website. Newsletter subscriptions are processed by Buttondown as described in Section 5.2.

Data Protection Contact: For questions specifically related to data protection, privacy rights, or data security, please contact:

  • Email: [email protected]
  • Subject Line: “Data Protection Inquiry”
  • Response Time: We will respond within 30 days as required by applicable data protection laws

Data Protection Responsibilities:

  • Ensuring compliance with data protection laws
  • Handling data subject requests (access, deletion, correction, etc.)
  • Managing data security incidents
  • Providing information about our data processing practices

Supervisory Authority: If you are not satisfied with our response to your data protection inquiry, you have the right to lodge a complaint with your local data protection supervisory authority:

  • European Union: Contact your local data protection authority (DPA)
  • United Kingdom: Information Commissioner’s Office (ICO)
  • United States: Federal Trade Commission (FTC) for privacy complaints
  • Other Jurisdictions: Contact your local data protection or privacy authority

Our Commitment: We are committed to protecting your privacy and handling your personal information responsibly. We will work with you to address any concerns you may have about our data practices.

15. Governing Law

This Privacy Policy is governed by and construed in accordance with applicable data protection laws, including but not limited to:

  • General Data Protection Regulation (GDPR) for users in the European Economic Area
  • California Consumer Privacy Act (CCPA) for users in California
  • Other applicable local data protection laws

16. GDPR-Specific Information (EEA/UK Users)

For users in the European Economic Area (EEA) and the United Kingdom, this section provides GDPR-specific clarifications as part of this Privacy Policy.

16.1 Data Controller

Planet Bites is the data controller for personal data processed through this website.

We process personal data under one or more of the following legal bases:

  • Consent: For activities that require your explicit permission (such as certain cookies and advertising preferences)
  • Legitimate Interests: To operate, secure, and improve our website and content
  • Legal Obligation: To comply with applicable laws and regulatory requirements

16.3 GDPR Rights

EEA/UK users have the following rights under GDPR:

  • Right of access
  • Right to rectification
  • Right to erasure
  • Right to restrict processing
  • Right to data portability
  • Right to object
  • Right to withdraw consent at any time

How to exercise these rights:

  • Email: [email protected]
  • Subject Line: “GDPR Data Request”
  • Response Time: We aim to respond within 30 days, subject to legal allowances

16.4 International Data Transfers

Your data may be transferred to and processed outside the EEA/UK. Where required, we apply appropriate safeguards and rely on lawful transfer mechanisms under applicable data protection law.

16.5 Supervisory Authority

If you believe your data protection rights have been infringed, you have the right to lodge a complaint with your local data protection supervisory authority.

Effective Date: April 2026

Website: Planet Bites — foodmlover.com · Real recipes from a home cook