Privacy Policy
Last updated: 8 April 2026
At MadPlanner, we take the protection of your personal data seriously. This privacy policy describes what data we collect, why we collect it, and your rights under the General Data Protection Regulation (GDPR, Regulation (EU) 2016/679).
This policy applies to the MadPlanner website (madplanner.dk) and the free meal planning tool.
1. Data Controller
The data controller responsible for processing your personal data is:
MadPlanner v/ Jacopo L. B. Valeri
CVR: registration pending
Email: privacy@madplanner.dk
Please do not hesitate to contact us if you have any questions about how we process your personal data.
2. What Data We Collect and Why
We only collect data that is necessary to provide our service. The table below provides an overview of all data processing on the MadPlanner website.
| Data | Purpose | Legal basis (GDPR Art. 6) | Stored? |
|---|---|---|---|
| Email address | Delivery of shopping list by email (optional). Marketing, only with separate consent. | Consent (Art. 6.1.a) | Yes — see section 8 |
| IP address | Rate limiting to protect the service against abuse. Not stored beyond the current request. | Legitimate interest (Art. 6.1.f) | No — transient |
| Anonymous usage events | Aggregate statistics about website usage (e.g. number of meal plans generated). Contains no personally identifiable information. | Legitimate interest (Art. 6.1.f) | Yes — no PII |
| AdSense cookies | Display of relevant advertisements via Google AdSense. Requires your explicit consent. | Consent (Art. 6.1.a) | By Google — see section 4 |
| Plausible Analytics | Privacy-friendly visit statistics. Self-hosted, no cookies, no personal data. Mentioned here for transparency. | Legitimate interest (Art. 6.1.f) | No — no PII, no cookies |
3. Legal Basis for Processing
We only process personal data when we have a valid legal basis under GDPR Art. 6:
- Consent (Art. 6.1.a): When you voluntarily provide your email address for shopping list delivery or accept marketing communications, we process this data on the basis of your consent. You may withdraw your consent at any time (see section 6).
- Legitimate interest (Art. 6.1.f): We process IP addresses temporarily to protect the service against abuse (rate limiting) and collect anonymous usage statistics to improve the service. These activities are carried out with due regard for your interests and rights, and no personal data is stored.
4. Data Processors and Third Parties
We only share data with third parties to the extent necessary to deliver the service. All data processors are bound by data processing agreements in accordance with GDPR Art. 28.
| Third party | Purpose | Transfer to third countries |
|---|---|---|
| Cloudflare, Inc. | Web hosting, CDN and DDoS protection. Cloudflare acts as a data processor for delivery of the website. | USA — transfer based on EU Standard Contractual Clauses (SCC) |
| Google AdSense | Ad display. Activated ONLY with your explicit consent via our cookie consent system. See Google's privacy policy. | USA — Google is covered by the EU–US Data Privacy Framework and SCC |
| Resend | Sending transactional email (shopping list). Processed ONLY if you choose to provide your email address. | USA — SCC |
| Google Fonts | Loading fonts (DM Serif Display, Plus Jakarta Sans) for the website's typography. Google Fonts is served via Google's CDN, which transmits your IP address and browser information to Google on each page load. | USA — Google is covered by the EU–US Data Privacy Framework and SCC. Legal basis: legitimate interest (Art. 6.1.f) |
| Plausible Analytics (self-hosted, planned) | Privacy-friendly visit statistics. Planned for a future update. When activated: our self-hosted installation will share no data with third parties. No cookies. No personal data. Status: not yet active. | None — data will remain on our own servers in the EU |
5. Data We Do Not Collect
We do not collect the following types of data:
- Payment card details (no payment functionality yet)
- Account credentials (no user accounts on the website)
- Device fingerprints or hardware identification
- Precise location data
- Biometric data
- Advertising identifiers — except cookies from Google AdSense, which are only set with your explicit consent for advertising (see section 4)
- Data from minors under 18 (see section 9)
- Data via third-party tracking (no Facebook Pixel, no Google Analytics)
6. Your Rights
As a data subject, you have a number of rights under GDPR (Art. 12–22). You can exercise your rights by contacting us at privacy@madplanner.dk. We will respond within 30 days.
Right of access (Art. 15)
You have the right to obtain confirmation as to whether we process personal data about you, and if so, to receive a copy of that data together with information about the purposes, categories and recipients.
Right to rectification (Art. 16)
You have the right to have inaccurate personal data about you corrected and incomplete data completed.
Right to erasure ("right to be forgotten", Art. 17)
If you have submitted your email address, you may request erasure by contacting us at privacy@madplanner.dk. We will process your request within 30 days.
Right to data portability (Art. 20)
You have the right to receive the personal data you have provided to us in a structured, commonly used and machine-readable format.
Right to restriction of processing (Art. 18)
Under certain circumstances you have the right to request that the processing of your personal data be restricted — for example while the accuracy of the data is being verified, or if you have objected to processing under Art. 21.
Right to object (Art. 21)
You have the right to object to our processing of your personal data that is based on legitimate interest (Art. 6.1.f). This applies to our processing of IP addresses for rate limiting and anonymous usage statistics. We will then cease the processing unless we can demonstrate compelling legitimate grounds that override your interests.
Right to withdraw consent
If our processing is based on consent, you may withdraw your consent at any time without affecting the lawfulness of processing carried out prior to the withdrawal. You may unsubscribe from marketing emails at any time using the unsubscribe link in the email or by contacting us. You may change your cookie settings via the "Cookie settings" link in the footer.
Right to lodge a complaint with the supervisory authority
If you believe that our processing of your personal data is in breach of data protection law, you have the right to lodge a complaint with the Danish supervisory authority, Datatilsynet:
7. Cookies
We use cookies to a limited extent. For a full overview of all cookies on madplanner.dk — including categories, purposes and retention periods — please see our Cookie Policy.
You may change your cookie settings at any time via the "Cookie settings" link in the footer on all our pages.
8. Retention Periods
| Data | Retention period |
|---|---|
| Email address (transactional delivery only) | 30 days after sending, then deleted |
| Email address (with marketing consent) | Until you withdraw your consent (unsubscribe via link in email or contact us) |
| Anonymous usage events | Indefinite — contains no personally identifiable information |
| AdSense cookies | In accordance with Google's cookie policy — see Google's cookie types |
| Klaro consent cookie | 365 days (your consent choice is stored so you don't have to decide again on your next visit) |
9. Children
MadPlanner is not directed at children under the age of 18. We do not knowingly collect personal data from minors. If we become aware that we have received data from a minor, we will delete it promptly.
If you are a parent or guardian and believe that your child has provided personal data to us, please contact us at privacy@madplanner.dk.
10. Changes to This Policy
We may occasionally update this privacy policy to reflect changes in our data processing or applicable law. Material changes will be communicated via a prominent banner on the website. The date of the most recent update is shown at the top of this page.
We encourage you to review this policy periodically. Your continued use of MadPlanner after publication of changes constitutes your acceptance of the updated policy.