Privacy policy

1. Who is responsible

forever.recipes, by Drafted By is the independent digital service responsible for the personal data processed here. It is operated within the European Union and is reachable at [email protected].

JEAN-DOMINIQUE MICHAEL CASANOVA Drafted_By (trading as Drafted By), a sole trader registered in Poland in CEIDG. Business address: ul. Dęblińska 2/73, 04-187 Warszawa, Poland. NIP: 1133212109.

2. What we store

• Your email address, used to sign you in, deliver service messages and, if you subscribe, send the newsletter. Newsletter preferences, consent evidence and unsubscribe status are stored in the application database.
• The books, recipes, notes, and photos you create.
• Recipes a relative sends with your binder's family link, with the name they type and nothing else about them (no IP address is kept). When one comes in, we email you its title and that name, at most once every 10 minutes per binder. You can switch these emails off in the binder's Share sheet or with the link at the bottom of each one.
• Your Stripe customer reference if you subscribe (we never see card numbers).

3. What we never do

• We never sell or rent your data to anyone.
• We never show advertising and never run ad trackers.
• We never use your content to train machine learning models.
• We never set marketing cookies.

4. Limited public measurement

On eligible public pages, we set one 30-day first-touch cookie. It contains only a public landing-page group and a broad source category, such as direct, search, newsletter, or referral.

A second first-party cookie, fr_src (180 days), keeps where your first and most recent visits came from: the referring site's domain (never its full address), the campaign tags of the link (utm), the type of ad click if any (never its identifier), and the public landing page. It is read only when you create an account, so we know which channels bring new families, and it is attached to that account in our product analytics.

Umami records a stable category for eligible public pages, without raw private paths or recipe content. PostHog receives limited public-site analytics events and sampled public performance data. For selected public pages, an arrival event contains a fixed page label and a broad source category, without the full URL, search terms, campaign text or referring address. These services receive limited route, source, and metric fields. This measurement excludes recipes and private books and does not include the content of your recipes, notes, books, or photos.

5. Processors

Your data passes through these processors, strictly for the purpose listed:

• Stripe processes payments and subscriptions and may retain billing or subscription records under its own legal obligations and policies.
• Cloudflare: traffic delivery, security and object storage for photos. The application and its database run on our infrastructure.
• OpenRouter and the selected model provider: optional AI drafting using the text or photo you submit. Provider-specific retention and data-use rules apply; submitting through OpenRouter alone does not guarantee zero retention at every downstream provider. Avoid including personal information that is unnecessary for the recipe.
• Amazon SES: transactional and subscribed newsletter email, including recipient, message content and delivery metadata. MXroute: received messages and manual replies. Historical Resend contacts, delivery records and exclusions are retained separately from the current newsletter database.

PostHog and self-hosted Umami support product measurement based on legitimate interest. Sentry processes technical error reports to diagnose failures. Email sending regions do not by themselves establish the location of all provider records.

6. Retention and deletion

We keep your data while your account exists. You can delete books, recipes, and photos yourself at any time. Account deletion removes the product data held by forever.recipes after required external cleanup succeeds. Stripe may separately retain billing records as described above. Newsletter consent and unsubscribe records are kept to respect your choices and prevent unwanted future messages. Support mailbox copies are kept for the exchange and any applicable accounting or dispute requirements; account deletion and newsletter unsubscription are separate operations.

7. Your rights

You have the right to access, rectify, export, and erase your personal data, and to object to or restrict processing. Write to [email protected] to make a request. You may also have the right to lodge a complaint with the data protection authority that applies to you.

8. Security

Access is by magic link (no passwords to leak), sessions are hashed at rest, and connections are encrypted in transit. Recovery backups are encrypted and isolated from ordinary product access. Photo and object-storage snapshots currently use 7 daily, 4 weekly, and 13 rotating 28-day recovery slots; off-site transfer copies expire after 9 days. A deleted photo can therefore remain in an isolated recovery snapshot until its slot expires. If a backup is restored, recorded deletions must be reapplied before the restored service becomes available to users.