Privacy Policy

Last updated: October 14, 2026

1. Who we are

Avocado Kiss (“we”, “us”) operates this website — a culinary magazine with recipes, articles and a Curated Shop of kitchen products with links to third-party retailers. For any privacy question or request, contact us via the contact details published on the Site.

2. What data we collect

• Newsletter email. Only if you submit it in the subscription form, and only to send you our newsletter.
• Recipe rating identifier.When you rate a recipe, a random identifier is stored in your browser’s local storage so we don’t count your vote twice. It is not linked to your name or email. Submitting a rating also runs a background bot check (Cloudflare Turnstile — see “Who we share data with” below).
• Technical logs. Our hosting provider processes standard server logs (IP address, browser type, requested pages) to deliver the Site securely.

We do not require accounts, do not process payments on the Site and do not run behavioural advertising. Every purchase you make on a Curated Shop link happens on the retailer’s own website, under its own privacy policy.

3. How we use data and on what legal basis

• Operating and securing the Site — legitimate interest (GDPR Art. 6(1)(f)).
• Sending the newsletter you asked for — consent (GDPR Art. 6(1)(a)), which you can withdraw at any time by unsubscribing.
• Preventing spam ratings via Turnstile — legitimate interest (GDPR Art. 6(1)(f)).
• Optional analytics — only with your prior consent given in the cookie banner; if you decline, no analytics run and nothing is collected.

4. Cookies and local storage

We use only what is strictly necessary for the Site to work, plus optional analytics that stay off unless you opt in. We run no advertising cookies:

• Consent record (essential). A local-storage entry remembering your cookie choice. Strictly necessary; it stores no personal data beyond the choice itself.
• Analytics (optional, off by default).Enabled only after you click “Accept” in the cookie banner. We use Google Analytics 4 to understand which pages are visited; it sets cookies (such as _ga) and sends usage data (pages viewed, approximate location, device and browser) to Google. If you decline, Google Analytics is not loaded and nothing is sent.
• Recipe rating identifier (essential). A local-storage entry that prevents duplicate votes on the same recipe from the same browser. It stores no personal data beyond a random identifier.
• Retailer cookies.When you click a Curated Shop link you leave the Site; the retailer may set its own cookies, including ones that attribute your purchase to us as a referral. Those cookies are governed by the retailer’s own privacy policy.

5. Who we share data with

• Vercel — hosting and content delivery (server logs).
• Supabase — our database and image storage infrastructure.
• Google — Google Analytics 4, only if you accept optional cookies. See Google’s Privacy Policy.
• Cloudflare— bot protection for our forms (Turnstile). When you submit a rating or the newsletter form, Turnstile silently verifies that you are human and may process technical signals from your browser for this purpose. This processing is described in Cloudflare’s Turnstile Privacy Addendum.
• Curated Shop retailers — only in the sense that you visit their sites when you click a product link; we do not transmit your personal data to them.

We do not sell your personal data to anyone.

6. Data retention

Newsletter emails are kept until you unsubscribe. Your recipe rating identifier stays in your own browser until you clear your browser storage. Hosting logs are retained for the short periods set by our hosting provider.

7. Your rights

Depending on where you live (including under the GDPR and similar laws), you have the right to:

• access the personal data we hold about you;
• have inaccurate data corrected;
• have your data deleted (“right to be forgotten”);
• restrict or object to processing;
• receive your data in a portable format;
• withdraw consent at any time (e.g. unsubscribe from the newsletter);
• lodge a complaint with your local data protection authority.

California residents: we do not sell or share personal information as defined by the CCPA/CPRA.

8. Children

The Site is not directed at children under 16 and we do not knowingly collect their data.

9. International transfers

Our infrastructure providers may process data outside your country. In such cases they rely on recognised safeguards (such as EU Standard Contractual Clauses).

10. Changes to this policy

We may update this policy; the current version with its “last updated” date always lives on this page. Significant changes will be highlighted on the Site.

11. Contact

For any privacy request, use the contact details published on the Contact page. See also our Terms of Use.