Your pantry is personal.

PickleBuoy is the controller of personal information collected through this website. For privacy questions, requests or complaints, email privacy@picklebuoy.com.

• Your email address.
• A salted password hash, its salt and hashing settings. We do not store your readable password.
• A hashed, single-use password-reset token and its expiry time when you request a reset.
• Your saved ingredient lists, account creation time and marketing preference.
• A short-lived random session token used to keep you signed in.
• Basic server logs, which may include IP address, browser information, requested pages and timestamps.

Account and list storage: to create your account, authenticate you and preserve your editable lists. The lawful basis is performance of our service agreement with you.

Security and service operation: to prevent misuse, diagnose faults, reset forgotten passwords and send important account, security or service notices. The lawful bases are performance of the service and our legitimate interest in operating it safely and reliably.

News and launch alerts: only when you actively tick the optional email box. The lawful basis is your consent. Account creation is not conditional on marketing consent.

You can withdraw marketing consent at any time using the unsubscribe option in an email or by contacting privacy@picklebuoy.com. Withdrawing consent does not affect essential account, security or service messages.

We do not sell email addresses or add people to marketing lists without an affirmative choice.

When you sign in, PickleBuoy sets one strictly necessary session cookie named picklebuoy_session. It is HTTP-only, Secure, SameSite Strict and lasts for up to seven days, although a server restart may end it sooner. It is required for the account feature, so no consent banner is needed for this cookie.

If you use PickleBuoy as a guest, your edited lists may be saved in your browser’s local storage. No advertising, analytics or cross-site tracking cookies are currently used.

Account data is stored in PickleBuoy’s private SQLite database on its 123 Reg-hosted server. We may use service providers to host the site, maintain infrastructure or deliver emails; they may process only what is necessary to provide those services.

We do not sell personal information. We may disclose information where required by law or where necessary to protect the service and its users. If a provider makes a restricted international transfer, appropriate UK data-protection safeguards must be used.

Traffic between your browser and PickleBuoy is encrypted with HTTPS. Passwords are salted and hashed with PBKDF2-HMAC-SHA256 before storage. Password-reset links use random, hashed, single-use tokens that expire after one hour. Session cookies are random, HTTP-only and HTTPS-only, and account database files are blocked from public web access.

Plain-language detail: email addresses and saved lists are stored in the server database and are not separately encrypted by the PickleBuoy application at rest. Access controls, server security and HTTPS are used to protect them. No online service can guarantee absolute security.

Account details and saved lists are kept while the account remains in use, or until deletion is requested, unless a longer period is needed for legal or security reasons. Password-reset links expire after one hour; their database records may be retained briefly for security and troubleshooting. Marketing preference records are kept while consent applies and as necessary to respect an opt-out. Routine web-server logs are normally retained for no more than 30 days unless a security investigation requires longer.

Depending on the circumstances, you may ask for access to, correction of, deletion of, restriction of or portability of your information. You can object to certain uses and have an absolute right to object to direct marketing. Where processing relies on consent, you can withdraw it at any time.

Contact privacy@picklebuoy.com to make a request. You may also complain to the UK Information Commissioner’s Office.

We may update this notice as PickleBuoy develops. Material changes will be highlighted on the site or sent by email where appropriate. The effective date above shows when this version began.