Skip to main content
TheViralRecipe
Legal document

Privacy Policy

Last updated:

1. Who we are

TheViralRecipe.com is operated by Matteo Pizzi, based in Italy. You can reach us at brand@theviralrecipe.com for any privacy-related matter.

This document describes how TheViralRecipe.com collects, uses and protects the personal information of its users in compliance with EU Regulation 2016/679 (GDPR) and applicable Italian law.

2. Data we collect

  • Registration data: name, email address, profile photo (if you sign in via Google OAuth).
  • Usage data: recipes viewed, voted or saved; preferred categories; content interactions.
  • Payment data: for Pro subscriptions, card data is handled exclusively by Stripe Inc. We do not store direct payment data.
  • Technical data: anonymized IP address, browser type, operating system, pages visited, session duration.
  • Cookies: see our Cookie Policy for full details.

3. Purposes of processing

  • Service delivery: account management, saving preferences, content personalization (legal basis: contract performance).
  • Site improvement: behavioral analysis via Google Analytics 4 (legal basis: consent).
  • Pro subscriptions: payment processing via Stripe, billing and withdrawal management (legal basis: contract performance and legal obligation).
  • Communications: transactional emails and, with your consent, newsletters (legal basis: consent or legitimate interest).
  • Advertising: with your consent, personalized ads via Google AdSense (legal basis: consent).
  • Security: fraud and abuse prevention (legal basis: legitimate interest).

4. Third parties

Supabase
Database, user authentication and storageEuropean Union (Frankfurt)
Privacy Policy →
Vercel
Website hosting and CDNEU / USA (Standard Contractual Clauses)
Privacy Policy →
Google Analytics 4
Traffic and user behavior analysis (consent only)USA (Standard Contractual Clauses)
Privacy Policy →
Google AdSense
Contextual and personalized advertising (marketing consent only)USA (Standard Contractual Clauses)
Privacy Policy →
Stripe
Pro subscription payment processingUSA (Standard Contractual Clauses)
Privacy Policy →
Replicate
AI-powered content generation and optimizationUSA (Standard Contractual Clauses)
Privacy Policy →
YouTube / Google
Embedding original recipe videosUSA (Standard Contractual Clauses)
Privacy Policy →

5. Data retention

  • Account data: retained for the duration of the contract and 2 years after deletion.
  • Analytics data: 14 months (Google Analytics standard period).
  • Technical logs: 90 days.
  • Tax/payment data: 10 years as required by Italian law.

6. Your GDPR rights

  • Right of access (Art. 15): obtain confirmation of processing and a copy of your data.
  • Right to rectification (Art. 16): correct inaccurate or incomplete data.
  • Right to erasure (Art. 17): request deletion of your data ("right to be forgotten"), where applicable.
  • Right to restriction (Art. 18): restrict processing under certain circumstances.
  • Right to data portability (Art. 20): receive your data in a structured, machine-readable format.
  • Right to object (Art. 21): object to processing based on legitimate interest or for direct marketing.
  • Right to withdraw consent: you may withdraw consent at any time without affecting prior lawful processing.

To exercise your rights, write to brand@theviralrecipe.com. We will respond within 30 days. You also have the right to lodge a complaint with the Italian Data Protection Authority (garanteprivacy.it).

7. Security

We implement appropriate technical and organizational measures to protect your data from unauthorized access, loss or disclosure. Traffic is encrypted via TLS, databases are protected by authentication, and API keys are never exposed to the client.

8. Cookies

We use technically necessary cookies and, with your consent, analytics and profiling cookies. For detailed information, see our Cookie Policy.

9. Minors

TheViralRecipe is not intended for users under 16 years of age. We do not knowingly collect personal data from minors. If you are a parent and believe your child has provided us with data, please contact us immediately.

10. Changes

We reserve the right to update this Privacy Policy. Material changes will be communicated via email (if you are registered) or via a prominent notice on the site.

11. Contact