Privacy Policy

Effective from 1 November 2026

This policy explains what personal data we process when you use the Recepty website (recepty.gnx.cz), why we do it and what rights you have.

Who processes your data

The data controller is Tomáš Vlach ("we" or "the operator").

For anything concerning your data, contact us by e-mail at recepty@gnx.cz.

What data we process

Account. When you register, you provide your name, e-mail address and password. We do not store the password itself, only its hash, from which it cannot be recovered. You must verify your e-mail address. We also remember the language you chose for your account (Czech or English).

Recipes. We store everything you enter in a recipe: title, description, ingredients, steps, times, servings, tags, photos, a private note and a source link. When you upload photos, we reduce their resolution and remove their metadata (EXIF), including location data (GPS).

Recipe visibility. For each recipe you choose who can see it:

• Private – only you can see the recipe.
• Link only – anyone who has the recipe's secret link can see it.
• Public – the recipe is in the public catalog and anyone can see it, including search engines. Public recipes show the author's name.

Saved links. When you save a link to a recipe on another website, our server downloads that page, reads its title, picture and, where available, ingredients and steps, and saves a copy to your collection as a private recipe with a link to the source.

Favourites and reports. We store which recipes you have marked with a heart. If you report a public recipe, we store the report together with the reason you give.

Moderation. We keep the account details needed for moderation, for example whether an author is trusted or whether an account is blocked.

Technical data.

• The web server keeps access logs: IP address, time, requested address (URL) and browser identification. We keep them for 10 days.
• The application keeps error logs for 14 days. They may contain the address of a link that failed to load.
• Login sessions are stored in the database together with the IP address and browser identification for as long as the session is valid.

Why we process data and on what legal basis

• Performance of a contract – to provide you with your account and the service: storing your recipes, photos, favourites and settings, and sending you necessary e-mails (e-mail verification, password reset).
• Legitimate interest – keeping the website secure and solving technical problems (logs), moderating public content and preventing abuse (reports, blocking accounts).

We currently do not process any data based on consent.

Who we share data with

The website runs on the operator's own server in the Czech Republic. We do not use any cloud hosting provider.

E-mails (e-mail verification, password reset) are sent through the SMTP server of Seznam.cz, a.s., which delivers them for us as a processor.

Otherwise we do not share your data with anyone, we do not sell it and we do not use it for advertising. Public recipes and their author's name are, by their nature, visible to anyone.

The website uses no analytics, tracking or advertising tools and loads no third-party scripts. The only exception is the picture preview when you fill in a recipe from a link: your browser may load it directly from the other website (without telling it where you came from). That website can therefore see your IP address.

We do not transfer data outside the European Union. We do not carry out any automated decision-making or profiling.

How long we keep data

• Account data, recipes, photos, favourites and reports: for as long as you have an account.
• Server access logs: 10 days.
• Application error logs: 14 days.
• Login session data: for as long as the session is valid.

Deleting your account

You can delete your account at any time in Settings → Profile → Delete account. This permanently deletes your account and all your recipes, photos, favourites and reports. This cannot be undone.

There is no data export feature yet. If you would like a copy of your data, write to us at recepty@gnx.cz.

Your rights

You have the right to:

• access the data we process about you,
• have inaccurate data corrected,
• have your data erased,
• restrict processing,
• data portability,
• object to processing based on legitimate interest.

You can exercise your rights by e-mail at recepty@gnx.cz. If you believe we are not handling your data properly, you can file a complaint with the Czech Office for Personal Data Protection (Úřad pro ochranu osobních údajů, www.uoou.cz).

Cookies

Information about cookies and data stored in your browser is on the Cookies page.

Changes to this policy

We may update this policy, for example when we add a new feature. We will announce material changes on the website in good time.