mad spatula

Privacy Policy for madspatula.com

Last updated: September 28, 2026

1. Introduction

Welcome to madspatula.com ("MadSpatula", "we", "us"). This Privacy Policy explains what personal data we collect, how we use it, and your rights under applicable data protection laws, including the GDPR. The data controller is Goran Manojlovic, contactable at info@madspatula.com.

2. Data We Collect

Account data (Sign in with Google). If you create an account or log in with Google, we receive your email address, your name, your profile picture, and a unique Google account identifier. We do not receive your Google password and we do not access any other Google data such as Gmail, Drive, or contacts. We only request the basic sign-in permissions (openid, email, profile).

Newsletter data. If you subscribe to our newsletter, we collect your email address to send you newsletters and updates. You can unsubscribe at any time using the link in every email.

Analytics data. If you consent to analytics cookies, Google Analytics collects information about how you use the site, such as pages visited, approximate location, device and browser type, and pseudonymous identifiers. This data is not used to identify you personally.

Technical data. Our hosting and security provider (Cloudflare) processes technical data such as your IP address and request details in order to deliver the site and protect it from abuse.

3. How We Use Your Data

We use your data to:

  • Create and maintain your account and let you log in
  • Provide the features of madspatula.com
  • Send newsletters and site updates (only if you subscribed)
  • Keep the site secure and reliable
  • Understand how the site is used and improve it (only if you consent to analytics)

We do not use your data for advertising, profiling, or resale. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

4. Legal Basis (GDPR)

  • Contract: processing your account data so you can use the site
  • Consent: newsletter emails and analytics cookies, which you can withdraw at any time
  • Legitimate interests: site security, delivery, and abuse prevention

5. Third-Party Services

We use the following service providers, who process data on our behalf or, in Google's case, under their own terms:

  • Supabase: authentication and database hosting for account data
  • Google: sign-in provider and Google Analytics (site analytics)
  • Cloudflare: website hosting, content delivery, and security
  • Microsoft Azure: newsletter email delivery

Some of these providers may process data outside the EU/EEA, including in the United States. Where this happens, transfers rely on appropriate safeguards such as Standard Contractual Clauses or the EU-US Data Privacy Framework. We do not sell, rent, or share your personal data with third parties for marketing purposes.

6. Cookies & Local Storage

Essential. We use cookies or browser storage to keep you logged in (authentication session tokens). These are required for the site to work and do not need consent.

Analytics. With your consent, Google Analytics sets cookies (such as _ga) to measure site usage. You can decline these or change your choice at any time using the "Cookie settings" link in the footer of every page. You can also block cookies in your browser or use Google's opt-out add-on at tools.google.com/dlpage/gaoptout.

We do not use advertising cookies.

7. Data Retention

We keep your account data for as long as your account exists. If you delete your account, we remove your personal data within 30 days, except where we must keep it by law. Newsletter emails are kept until you unsubscribe. Analytics data is retained for 14 months and then automatically deleted.

8. Your Rights (GDPR)

If you are located in the EU/EEA, you have the right to:

  • Access the personal data we hold about you
  • Request correction or deletion of your data
  • Request restriction of, or object to, processing
  • Receive your data in a portable format
  • Withdraw consent at any time (for example, by unsubscribing or changing your cookie settings)
  • Lodge a complaint with your local data protection authority

To exercise these rights or delete your account, email info@madspatula.com. You can also revoke MadSpatula's access to your Google account at any time at myaccount.google.com/permissions.

9. Children

madspatula.com is not directed at children under 16, and we do not knowingly collect their data.

10. Changes to This Policy

We may update this policy from time to time. The "Last updated" date above shows the latest revision, and we will notify subscribers of significant changes.

11. Contact

Questions about this policy or your data: info@madspatula.com