Privacy Policy

We store the minimum needed to run your account: your email, a hashed password, your recipes, your job history and your credit ledger. We never sell your data.

Generated files are held temporarily and deleted automatically after their retention window. You can delete your recipes at any time.

Website analytics

We measure how this public website is used with Umami, which we run ourselves on our own server in Germany. No analytics company receives your data, and nothing is shared with anyone.

It sets no cookies and stores nothing on your device. We deliberately configured it not to read your browser language or screen size, so it needs no consent banner and you are not asked to click one.

What is recorded: the page you viewed, the site that linked you here, campaign parameters in the link, your country, and whether you are on a desktop or a phone. The country and device type are worked out on our server from the connection itself; your IP address is not stored. There is no session recording, no heatmap, and no profile built about you.

The signed-in application is not tracked at all. Analytics runs only on these public pages. Nothing that identifies you as a user is ever sent — which also means there is nothing about you in our analytics to export or erase. Your browser’s “Do Not Track” setting is respected if you have it on.

Legal basis: our legitimate interest in understanding how the site performs (GDPR Art. 6(1)(f)). Because no information is stored on or read from your device, Art. 5(3) of the ePrivacy Directive and § 25 TDDDG do not require your consent.

Your rights

You can exercise these yourself, immediately, from Account & Privacy — no request or waiting period:

• Access and portability. Download everything we hold about you as a single JSON file: profile, recipes, generation history, credit ledger and API key metadata.
• Erasure. Delete your account and all data belonging to it. This is immediate and irreversible; remaining credits are forfeited.

Passwords and authentication secrets are never included in an export. If you need help, or want to exercise a right not covered above, write to support@ghostbakery.com.