Privacy Policy

1. Who We Are

Attic Recipes is an independent digital culinary history project exploring recipes and food traditions of the early 20th century. This website is operated as an individual independent project.

Questions about this policy: Contact page

2. What Data We Collect

Automatically Collected

• Server logs: IP address, browser type, device info, pages visited, timestamps
• Analytics: Page views, session duration, referring sites (Google Analytics, anonymized)
• Cookies: Small files stored on your device to remember preferences and enable analytics

Voluntarily Provided

• Email address: Only if you subscribe to our newsletter
• Contact form: Name, email, and message when you contact us directly

We do not collect payment information, government identifiers, or sensitive health data.

3. How We Use Your Data

• Website operation: To deliver content and maintain functionality
• Analytics: To understand which content is most useful to readers
• Communication: To respond to contact form submissions
• Security: To detect and prevent fraud, spam, or abuse
• Legal compliance: To meet obligations under GDPR, CCPA, COPPA, and applicable law

4. Legal Basis for Processing (GDPR)

This site is subject to the EU General Data Protection Regulation (GDPR) and the Serbian Law on Personal Data Protection (ZZPL). For users in the EU, UK, and Serbia, we process personal data under the following legal bases:

• Legitimate interests: Basic analytics and security monitoring
• Consent: Analytics cookies, advertising cookies, and newsletter subscription
• Legal obligation: Where required by applicable law

You may withdraw consent at any time by adjusting your cookie preferences or contacting us.

5. Cookies

• Essential cookies: Required for basic functionality. Cannot be disabled.
• Analytics cookies: Google Analytics with anonymized IPs. Opt out via cookie banner.
• Advertising cookies: Google AdSense when enabled. Opt out via cookie banner.

We implement Google Consent Mode v2 — analytics and advertising fully respect your cookie choices. No advertising or analytics data is collected without your explicit consent.

More info: AllAboutCookies.org ↗

6. Third-Party Services

Each third-party service operates under its own privacy policy. We are not responsible for data collected by these services beyond what is described here.

7. Data Retention

• Server logs: 90 days, then automatically deleted
• Analytics data: 26 months (anonymized, no personal identifiers)
• Newsletter subscriptions: Until you unsubscribe
• Contact form submissions: Up to 12 months, then deleted
• Cookie preferences: Until you clear browser data or withdraw consent

8. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

EU / UK / Serbia (GDPR and equivalent)

• Access: Request a copy of the data we hold about you
• Rectification: Request correction of inaccurate data
• Erasure: Request deletion of your data ("right to be forgotten")
• Portability: Receive your data in a machine-readable format
• Object: Object to processing based on legitimate interests
• Withdraw consent: Change cookie preferences at any time
• Lodge a complaint: With your national data protection authority

California (CCPA)

• Know: What personal information is collected and how it is used
• Delete: Request deletion of personal information
• Opt out: Of the sale of personal information (we do not sell data)
• Non-discrimination: We will not discriminate against you for exercising rights

To exercise any of these rights, contact us via our Contact page. We respond within 30 days.

9. Children's Privacy

10. Data Security

• HTTPS encryption on all pages (SSL/TLS)
• Secure hosting with Cloudflare Pages and CDN protection
• Content Security Policy (CSP) headers
• HTTP Strict Transport Security (HSTS)
• Rate limiting and bot protection via Cloudflare Turnstile
• Minimal data collection by design

No method of transmission or storage is 100% secure. In the event of a data breach affecting your rights, we will notify you as required by applicable law.

11. International Data Transfers

This website is hosted on Cloudflare Pages and uses Google services, which may involve transfer of data outside the EU or Serbia. These transfers are covered by Standard Contractual Clauses or equivalent safeguards approved by the European Commission.

12. AI-Generated Images

Food images on this website are generated using AI image tools. These images do not depict real food prepared in a real kitchen and are used for illustrative purposes only. No personal data is embedded in or derived from these images.

13. Changes to This Policy

We may update this policy as our practices change or as required by law. The "Last updated" date at the top will reflect any revision. Material changes will be posted prominently on the website. Continued use of the website after changes constitutes acceptance.

14. Contact

We aim to respond within 48 hours.