Privacy Policy

Who is responsible

The operator identified above is the controller of personal data processed through Foodroll. Contact [Privacy email to be confirmed] about privacy or to exercise your rights.

Data we process and why

• Account information: name, email, password hash, verification status and acceptance of the Terms. We use this to provide and secure your account under our contract with you.
• Public information: username, avatar, bio, photos, optional location tags, and post time-zone metadata. We store and display these to provide the sharing service you request.
• Activity: Bites and passes, following Tables, notifications, blocks and username-change history. These support discovery, social features and account controls under our contract with you.
• Reports and moderation records: report reasons, details, relevant accounts and review outcomes. We process these for our legitimate interests in preventing abuse and protecting users, and for legal obligations where applicable.
• Technical data: session identifiers, IP addresses, browser information and application logs used to maintain secure access, diagnose faults and prevent abuse, based on our legitimate interests in service security.

Providing an email and password is necessary for an account. Profile photos, biography and location tags are optional. Do not include sensitive personal information in public photos or report details unless necessary to explain the concern.

Location and discovery

You choose a location to browse and may tag a photo with a location. We do not request GPS coordinates for this feature. A photo's location tag is public. The browser may supply a time-zone name for a post. Photos can contain embedded metadata; do not upload files containing location information you do not want to disclose.

Who can see data

Public profiles and photos can be viewed by visitors, including people who are not signed in. Administrators can access records needed for moderation and support. Hosting, storage and email providers process data to operate the service. Current providers: [Provider names, purposes and hosting regions to be confirmed]. We may disclose data when required by law or to protect legal rights. Blocking does not prevent someone from viewing public content while signed out.

International transfers

[Confirm whether data leaves the EEA, destination countries, the applicable adequacy decisions or contractual safeguards, and how to obtain a copy of those safeguards before launch.]

Cookies and browser storage

Foodroll uses session and security cookies to keep you signed in and protect forms. If you select remember me, a persistent authentication cookie is used. Browser storage can hold feed progress and interface preferences. These support the requested service. This application does not include advertising trackers. Any future optional analytics or advertising storage will require a separate assessment and consent where required.

Retention and deletion

Account and social records remain while you use your account. Deleted individual posts may remain hidden in the application until account removal. Permanent account deletion removes your account, avatar and uploaded photo files, posts, Bites, follows, Tables, alerts, blocks, associated reports, password-reset records and database sessions from the active application. Like totals are adjusted when your Bites are removed.

Backup retention and erasure process: [Backup expiry, deletion safeguards and restore handling to be confirmed]. Security and application log retention: [Log retention and redaction process to be confirmed]. Copies saved by other people are not controlled by Foodroll. If law requires particular records to be retained, we will identify the legal basis and restrict their use.

Your rights

Where GDPR applies, you may request access, correction, erasure, restriction, and portability of your personal data, and object to processing based on legitimate interests. If we rely on consent, you may withdraw it without affecting earlier lawful processing. Use Account and privacy to download data or delete your account, or contact the privacy address above for other requests. We may verify your identity. We normally respond within one month; where a lawful extension is needed, we will explain it within that month.

You may complain to a data-protection authority, particularly in the country where you live, work, or believe an infringement occurred. See the European data-protection authorities directory.

Ranking, age and changes

Discovery filters photos by the location or Table you select and orders eligible photos by Bites, with newer IDs breaking ties. This is not a decision producing legal or similarly significant effects. Accounts are intended for people aged 18 and above. Contact us if you believe an underage person has supplied data. Material changes to this notice will be communicated through the service as appropriate.