Privacy policy
Last updated 2026-10-01.
Who is responsible
Pablo Bravo Villanueva, Calle Linares 30, 47010 Valladolid, Spain (NIF 12436687N) is the publisher and data controller for the application. You can contact the publisher at the email linked below.
Tool inputs
The planner receives household size, days, dietary filters, nutrition targets and a reproducible seed. It does not ask for names, health records or an account. Choices, including excluded allergens, appear in result addresses and can be visible in browser history and hosting access logs. A share link reveals the choices in that link.
The site does not sell personal data, create user accounts or make automated decisions with legal or similarly significant effects. Public outputs are informational tools.
Server and security information
Hosting infrastructure processes request addresses, time, IP addresses and browser information to deliver the site and prevent abuse. A reverse proxy or security provider can process these details when configured by the host. This processing supports the legitimate interest in running a reliable, secure site (GDPR Article 6(1)(f)). The application does not keep a user profile or a separate history of tool submissions.
The public API uses an HMAC of the requesting IP address for a per-minute counter. Raw IP addresses are not written to that application counter. The counter resets after a minute; its file remains until cache maintenance. Hosting access logs are separate.
If you contact the publisher, your email address and message are used to respond to your request and deal with any related correction or support matter. This supports the legitimate interest in answering correspondence and, where applicable, taking steps requested by you. Gmail is used for the listed contact address; do not send sensitive records or completed forms.
Optional services
Advertising and analytics are disabled. This site loads no advertising or analytics service. If either is enabled, optional services require acceptance through the privacy controls and this policy must be reviewed before the configuration changes.
Affiliate links are disabled. Source links lead to external sites whose privacy practices are their own.
Where optional cookies or similar identifiers are used, consent is the basis for that optional processing (GDPR Article 6(1)(a)). Core tools remain available if you decline.
Retention and recipients
The application keeps cached public pages and source data, rather than accounts or completed private submissions. Consent preferences remain on your device until you remove them. Email correspondence and infrastructure logs are retained only as needed for the conversation, security, troubleshooting or legal obligations; a fixed hosting-log deletion period is not asserted here.
The hosting and email providers process the data needed to provide their services. Enabled optional services receive data only as described above. Providers may operate outside your country; the publisher must use applicable data-protection safeguards for transfers when required. This policy does not claim an unverified certification or transfer arrangement.
Your rights
Where the GDPR applies, you may request access, correction, deletion, restriction or objection, and portability where its conditions are met. You may withdraw consent to optional processing without affecting earlier lawful processing. Write to the contact address below. Requests are handled within the applicable statutory period, generally one month, with any permitted extension explained.
You may complain to the Spanish data-protection authority (AEPD) or the supervisory authority competent for your situation. US visitors can reject optional services with the same footer controls. The application does not sell personal information.
Children and security
The tools are intended for adults. Baby-related content is for caregivers; no tool asks for a child’s identifying details. Do not send children’s personal or medical records. The public deployment uses HTTPS, and administrative access should be restricted. The browser and the publisher’s host remain part of the data-handling chain.
Changes
Changes are published with a new last-updated date. Source-data review dates are separate from this policy date.
Publisher contact and references
Website corrections · Publisher identification · Privacy · Cookies · Terms · Disclaimer.
LSSI-CE Article 10 · GDPR · AEPD.