Privacy Policy
Last updated: May 23, 2026
The ndrmealplan.com website (the "site" or "we") respects your right to privacy. This document explains what data we collect, why, how long we keep it, and your rights under the GDPR (EU Regulation 2016/679).
1. Who processes your data
The site is operated by an individual based in Romania, reachable at andrudsk@gmail.com. For any request related to your personal data, use this address.
2. What data we collect
- Anonymized usage data through Vercel Web Analytics and Vercel Speed Insights. No cookies, no individual identification.
- Google Analytics 4 data, ONLY if you explicitly accept it from the cookie banner. Anonymized IP, pseudonymous session identifier.
- Language preference (RO or EN), stored in your browser's localStorage. Does not leave your device.
- Your choice from the cookie banner, stored in localStorage so we do not ask you on every visit.
We do not collect names, addresses, phone numbers, or other directly identifying data. There are no contact forms or accounts on the site.
3. Why we process this data
- To measure in aggregate how many people use the site, which recipes are popular, and on what devices (mobile, desktop, browser).
- To remember your language preference between visits.
- To honor your choice regarding analytics cookies.
4. Legal basis
- Explicit consent (Art. 6(1)(a) GDPR) for Google Analytics 4.
- Legitimate interest (Art. 6(1)(f) GDPR) for anonymous aggregated analytics (Vercel).
- Functional necessity for localStorage (language preference, consent choice).
5. Retention
- Google Analytics 4: 14 months (GA4 default).
- Vercel Analytics: aggregated permanently, no individual visitor identification possible.
- localStorage (language, consent): until you clear browser data or visit from a new browser.
6. Who we share data with
We use the following service providers (sub-processors):
- Vercel Inc. (hosting and analytics) — see vercel.com/legal/privacy-policy.
- Google Ireland Ltd. (Google Analytics 4, only with your consent) — see policies.google.com/privacy.
We do not sell or rent your data to third parties for marketing purposes.
7. Your rights
Under GDPR, you have the right:
- to access your processed data;
- to request correction of inaccurate data;
- to request deletion of your data ("right to be forgotten");
- to request restriction of processing;
- to receive your data in a portable format;
- to object to processing;
- to withdraw consent at any time (clear cookies and localStorage in your browser, or click "Only essential" on a fresh visit).
For any request, write to andrudsk@gmail.com. We respond within 30 calendar days.
8. Complaints
If you are dissatisfied with how we handle your data, you may file a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP): www.dataprotection.ro.
9. Transfers outside the EU
Vercel and Google may also process data in the United States. Both companies adhere to the EU-US Data Privacy Framework and have signed Standard Contractual Clauses, ensuring a level of protection equivalent to the EU.
10. Changes
This policy may be updated periodically. Material changes will be announced visibly on the homepage. Check back occasionally.
11. Contact
For any question about this policy or your data, write to andrudsk@gmail.com.