Last updated: 22 August 2026
This site is a small, self-hosted hobby project. It doesn't have accounts, doesn't use cookies, and doesn't run any analytics or advertising trackers. This page explains the little that is processed anyway.
Standard web server log data only: timestamp, the page requested, and browser user-agent string. This is generated automatically by two layers that any website has - Cloudflare (used as reverse proxy/CDN in front of this site) and the origin server's own nginx web server. Regarding IP address: Cloudflare, as the reverse proxy, sees your real IP address; the origin server's own nginx never does - it only ever sees Cloudflare's proxy IP, not yours.
The only things stored in your browser are a couple of local preferences
- whether the recipe tree is shown flipped, and which items you've starred
as favorites - saved via localStorage. None of this is a
cookie, none of it is sent to the server, none of it identifies you, and it
never leaves your device.
This site can be installed to your phone's home screen as a Progressive Web App. Installing only changes how it launches - its own icon and window, no browser address bar - it does not change anything about what data is processed. There's no account, no push notifications, and no extra permissions are requested at install time.
A small service worker script is registered so the browser recognises the site as installable. It does not cache pages for offline use, does not store anything on your device, and does not run in the background - every request it sees is passed straight through to the network, unchanged. You can inspect it yourself: /sw.js.
Purely to operate and secure the site - for example, telling apart normal traffic from abusive requests. This is a legitimate interest under Art. 6(1)(f) GDPR; nothing is used for profiling, marketing, or sold to anyone.
Logs on the origin server (nginx) are kept for 14 days and then deleted automatically. Cloudflare, as a sub-processor delivering the site, retains request data according to its own policy - see the Cloudflare Privacy Policy. The server itself is hosted with Linode, which processes data only to run the underlying infrastructure.
Nothing is sold or shared beyond the infrastructure providers above, who process it strictly to deliver and secure the site.
Under the GDPR you can ask to access, correct, delete, or restrict the processing of your personal data, or object to it. Contact laszlo@kallos.dev for any of this.
You also have the right to lodge a complaint with the Hungarian supervisory authority, the Nemzeti Adatvédelmi és Információszabadság Hatóság (NAIH).
laszlo@kallos.dev · see also security.txt.