Privacy Policy

This is the privacy policy for Bariatric Recipes. It describes the site as it exists today: no customer accounts, no passwords, no mailing list, and no advertising.

Almost all of it is about one moment — buying an e-book — because checkout is the only place the site asks you for anything. You can read every recipe on this site without telling us who you are.

Only what it takes to send you the book you bought and to answer a question about it afterwards.

Your email address

Checkout asks for it because your e-books are delivered by email. It is stored with your order, and it is what we match a support request against later.

Your name

Optional. If you give it, it is used to address your receipt. Nothing else.

Your order

Which e-books you bought, the price shown at the time, your order number, and when the order was placed.

Download records

Each time a download link is used, we record the time, the IP address it was used from, and the browser's user-agent string. That record is what sits behind the five-download limit on every link, and it is how a link that has been passed around becomes visible.

Receipt records

The address each receipt or download email went to, its subject line, and whether the email service accepted it — so “did it actually send?” is a question we can answer instead of guess at.

Anything you write to us

If you email support or use the contact form, we have your message and the address it came from until the question is closed.

We never see a card number. Payment is taken by Stripe, our payment provider, on its own secure page: your card, wallet and billing details go to Stripe directly and are held under Stripe's privacy policy. What comes back to us is the fact that the order was paid, the amount, and Stripe's reference for it — enough to deliver your books, and nothing more.

Three plain reasons, and no others.

To do what you asked

You bought a book. Your email address is how it reaches you, and the order record is what makes a resent link possible at all. In data protection language, this is processing necessary to perform our contract with you.

To keep the shop working

Download records and email delivery records exist so a link cannot be shared endlessly and so a missing receipt can be traced. That is our legitimate interest in running a shop that works and is not abused — weighed against how little those records say about you.

Because a sale has to be recorded

Business and tax rules expect a seller to keep a record of what was sold, to whom, and for how much.

There is no fourth reason. We do not profile you, score you, sell your details, or use them to advertise anything to you.

Download links

Every link expires 7 days after it is issued, or after 5 downloads, whichever comes first. After that the link is dead; the record that it existed stays with the order.

Order records

Kept for as long as the sale has to stay answerable: support and the accounting record of what was sold.

Support messages

Kept while the question is open, and for a short while after in case it comes back.

We run no automatic deletion job today, so a deletion request is handled by a person rather than by a timer. Ask, and we do it — see your choices below.

A short list of companies, each doing exactly one job:

Our website host

Runs the site itself and handles the traffic that reaches it.

Supabase

Hosts the database your order is stored in, and the private file store the e-book PDFs sit in. Those files are never public: each download is a short-lived signed link, and nothing else can reach them.

Our email service

Sends your receipt and your download links, and therefore holds the address they were sent to.

PostHog

Our analytics. It records which pages are opened and which steps of checkout are reached, so we can see where the shop is confusing or broken. The email address you give at checkout is attached to the events for your own order, so a purchase can be followed from the first page to the download. It is never used to advertise to you, and it is not passed on to anyone else.

Stripe

Takes the payment on its own checkout page and holds the card details we never see. It also keeps the record of the charge, because that is where it actually happens.

That is the whole list. No advertisers, no data brokers, no social network. We do not sell or rent your details to anyone, and nothing here is used to follow you onto other websites.

If the law ever obliges us to hand something over, we will, and we will tell you unless we are forbidden from telling you.

There are no advertising cookies on this site and no advertising pixels, so nothing here is selling your attention to anyone. What is kept on your device is this:

Your cart

Kept in your own browser's local storage so it survives a refresh. It stays on your device until you check out, and clearing your browser's site data empties it.

Analytics

PostHog stores an identifier for this browser, so a series of visits reads as one person rather than as a crowd of strangers. It records what you do on this site and nothing you do anywhere else.

That is everything this site stores on your device. Stripe's checkout page, where you pay, sets cookies of its own to run the payment and to spot fraud; they belong to Stripe's page, not to this site, and its privacy policy describes them.

You can ask us to show you what we hold about you, correct it, delete it, or stop using it in a particular way. Email support@bariatricrecipes.shop from the address you used at checkout, or include your order number, and we will reply. There is no form to fill in and no fee.

There is no account to log into and no mailing list to unsubscribe from. Receipts and download links are the only email we send you.

One trade-off worth knowing before you ask: deleting an order also deletes the download links that belong to it. If you still want the books, download them first.

If you think we have handled your information badly, tell us first — we would much rather fix it. You are also entitled to complain to the data protection authority where you live.

The site, the database and the file store run on providers with servers in more than one country, so ordering from elsewhere means your order details cross a border to reach us. Where that happens, the providers' standard data protection terms cover the transfer.

Crossing a border does not change who sees your details: the same short list above, doing the same jobs.

This is a shop for adults. It is not aimed at children, and we do not knowingly collect anything from a child under 16. If you believe a child has given us their details, write to us and we will remove them.

The date at the top of this page is the announcement — there is no mailing list to send a notice to. When something material changes, such as a change of payment provider, it lands here first and that date moves with it.

An order you have already placed stays under the version of this page that was live when you placed it.