Privacy
Last updated 30 July 2026
withsalt is operated by [Company name, registered address and company number] (“we”). This page explains what we collect, why, where it is kept, and how to remove it. If anything here is unclear, ask us — the contact details are on the contact page.
What we collect
When you create an account: your email address, a password (stored only as a hash — we never see it), a username, and optionally a display name, bio, website and profile photo.
What you put on withsalt: recipes, posts, comments, ratings and notes, collections, the accounts you follow, any photos you upload, and direct messages you send. Most of this is public by design — a recipe you publish, and your profile, can be read by anyone. Direct messages are visible only to the people in the conversation.
Usage: anonymous, aggregated page views and product events (for example, that a recipe was saved) via Vercel Web Analytics. This is cookieless and is not tied to you as an individual.
What we do not do
- We do not sell or rent your personal data.
- We do not run advertising or third-party ad trackers.
- We do not use analytics cookies, so there is no cookie banner. The only cookies set are the ones that keep you signed in.
Why we are allowed to hold it
We process your account details to provide the service you asked for (performance of a contract). We process content you publish because you chose to publish it. We keep aggregate usage statistics on the basis of our legitimate interest in understanding whether the product works — because this data is anonymous, it cannot be traced back to you.
Where it is stored
Accounts, content and uploaded files are held by Supabase in the European Union (Ireland). The site is served by Vercel. Both act as processors on our instructions.
How long we keep it
For as long as your account exists. When you delete your account, your profile, recipes, posts, comments, ratings, collections, follows, messages and uploaded files are deleted immediately and permanently. Backups may retain copies for a short period before being overwritten.
Your rights
Under UK GDPR you can ask for a copy of your data, correct it, delete it, restrict or object to how we use it, and complain to the Information Commissioner’s Office.
You can delete your account yourself, at any time, from Settings. You do not need to ask us and we will not try to talk you out of it.
Children
withsalt is not intended for children under 13, and we do not knowingly collect their data. If you believe a child has an account, tell us and we will remove it.
Changes
If we change this policy in a way that materially affects you, we will say so on this page and update the date above.
This policy describes how the product actually behaves, but it has not been reviewed by a solicitor. Have it checked, and fill in the company details above, before launch.