Privacy Policy

Last updated: September 17, 2026

This policy explains what personal data Foodmetria (“we”, “us”) processes when you use Foodmetria and how you can exercise your rights. We keep data collection to the minimum needed to run the site.

1. Who is responsible

The controller of your personal data is the operator of Foodmetria. You can reach us at [email protected].

2. Data we process

  • Server logs. When you visit a page, our servers and hosting providers automatically record technical data: IP address, date and time, requested URL, referrer, browser and device type. We use it to deliver the site, prevent abuse and fix errors. Logs are deleted after 30 days unless needed to investigate a security incident.
  • Reviews you submit. If you post a product review we store the display name you choose, your rating, the review text, the time of submission and a one-way hash of your IP address (used only to prevent spam and duplicate reviews). Published reviews, including your display name, are publicly visible. We do not ask for your email address or real name.
  • Messages you send us. If you email us we process your email address and the content of your message to reply.
  • Usage statistics. We use Google Analytics 4 to understand how visitors use Foodmetria (pages viewed, approximate location, device and browser, how you arrived). See section 3.

We do not create user accounts, we do not use advertising cookies, and we do not build advertising profiles about you.

3. Cookies and similar technologies

Analytics cookies. We use Google Analytics 4 (Google Ireland Ltd. / Google LLC), which sets first-party cookies such as _ga and _ga_* (retention up to 14 months). Advertising features and Google Signals are not used, and IP addresses are not stored by Google Analytics 4.

Visitors from the EU/EEA, the UK and Switzerland see a consent banner: analytics cookies are set only after you click “Accept”. Until then Google Analytics runs in a restricted mode without cookies. Visitors from other countries have analytics enabled by default and can switch it off at any time.

You can change your choice at any time via “Cookie settings” in the footer. Your choice is stored in your browser’s local storage. Reviews and spam protection work without cookies.

Your diet preferences. If you use the “Fits me” feature, the allergens, diets and limits you tick are stored in your browser’s local storage on your device only. They are never sent to our servers, are not linked to any account or identifier, and no cookie is set. Whether a product fits you is worked out inside your browser. Clearing your browser data, or pressing “Clear all” in the panel, removes them permanently. These preferences may reveal information about your health, so we keep them on your device by design and never process them ourselves.

4. Legal bases (EU/EEA and UK)

  • Server logs, spam prevention and security — our legitimate interest in operating a secure, reliable website (Art. 6(1)(f) GDPR).
  • Analytics cookies (Google Analytics) — your consent (Art. 6(1)(a) GDPR and national rules implementing Art. 5(3) ePrivacy Directive), which you can withdraw at any time.
  • Publishing your review — performance of the service you request by submitting it (Art. 6(1)(b) GDPR).
  • Answering your messages — our legitimate interest in responding to enquiries (Art. 6(1)(f) GDPR).

5. Third parties

  • Cloudflare. Our website is delivered through Cloudflare, Inc., which acts as our content delivery network and security provider and processes technical request data (such as IP address and browser type) to deliver pages and block attacks. See the Cloudflare privacy policy.
  • Google. Google Analytics is provided by Google Ireland Ltd. (and Google LLC, USA). Data may be transferred to the United States under the EU–US Data Privacy Framework. See Google’s privacy policy and how Google uses data from sites that use its services.
  • Open Food Facts. Product photos come from Open Food Facts. Most are served from our own domain; photos we have not stored yet are loaded directly from Open Food Facts servers (images.openfoodfacts.org), in which case your browser sends your IP address to them. See the Open Food Facts privacy policy. Price information is requested by our server from Open Prices; no data about you is sent.
  • Hosting and delivery providers that process data on our behalf under data processing agreements. Some of them may be located outside your country, including the United States; where required, transfers rely on appropriate safeguards such as the EU Standard Contractual Clauses or the EU–US Data Privacy Framework.

Partner links. Some links and the optional “Also search deals on …” box next to the search field open partner websites (for example Booking.com) in a new tab. The box is visible and can be unticked at any time; your choice is saved only in your browser. We may earn a commission if you make a purchase on a partner site. The partner receives your visit directly and applies its own privacy policy and cookies; we only count how many times the partner tab was opened, without any personal data.

We do not sell personal information and we do not share it for cross-context behavioral advertising.

6. How long we keep data

Server logs: 30 days. Published reviews: until you ask us to delete them or we remove them. Rejected reviews and IP hashes: up to 90 days. Emails: as long as needed to handle your request, then up to 12 months.

7. Your rights

EU/EEA and UK residents can request access to, correction or deletion of their data, restriction of processing, data portability, and can object to processing based on legitimate interests. You also have the right to lodge a complaint with your local data protection authority.

US residents (including California, Colorado, Connecticut, Virginia and other states with privacy laws) can request to know, access, correct and delete personal information we hold about them. We do not sell or share personal information, so no opt-out is needed; we honor Global Privacy Control signals regardless. We will not discriminate against you for exercising your rights.

To exercise any right, email [email protected]. For review deletion, include the product page and the display name you used. We respond within 30 days (45 days where US law allows).

8. Children

Foodmetria is not directed at children under 16, and we do not knowingly collect personal data from them. If you believe a child has submitted a review, contact us and we will remove it.

9. Security

We use HTTPS, restrict access to our systems and store only hashed IP addresses for reviews. No method of transmission or storage is completely secure, but we work to protect your data.

10. Changes

We may update this policy. The date at the top shows the latest version. Significant changes will be highlighted on this page.