Privacy Policy
Privacy by Design and Data Minimization
FoxyChef is committed to protecting the privacy and personal autonomy of our readers. We operate under strict data minimization principles: we do not collect personal data that is not strictly necessary for delivering culinary guides, running our measurement tools, and maintaining platform security. We do not sell, rent, lease, or monetize your personal information to third-party data brokers or marketing conglomerates.
This Privacy Policy explains how information is handled when you browse FoxyChef, utilize our kitchen calculators, or contact our editorial desk, in full compliance with the European General Data Protection Regulation (GDPR), the UK Data Protection Act, and the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA / CPRA).
Privacy-Preserving Analytics with Umami (Zero-Cookie Architecture)
Unlike conventional recipe and lifestyle websites, FoxyChef does not utilize Google Analytics (GA4), invasive advertising tracking pixels (such as the Meta Pixel or TikTok tracking script), or cross-site fingerprinting technologies. We believe that looking up an ingredient substitution or a cake baking ratio should never compromise your digital privacy.
We measure aggregate platform traffic using an isolated, self-hosted deployment of Umami Analytics. Umami is engineered specifically to respect user privacy:
- Zero Cookies: Our analytics script does not create, store, or transmit cookies, local storage identifiers, or persistent tokens on your device. You can browse FoxyChef with complete confidence that no tracking files remain on your system.
- No Cross-Site Fingerprinting: Umami does not track your activity across different domains, build commercial behavioral profiles, or track your identity over time.
- Cryptographic IP Anonymization: Incoming IP addresses are processed in volatile memory through an irreversible SHA-256 cryptographic hash combined with a daily rotating salt string. The raw IP address is discarded immediately; only the non-reversible, salt-scrambled string is used to identify unique visits for a single calendar day before the salt is destroyed.
- Aggregate Metrics Only: The data collected is limited strictly to aggregate metrics: total pageviews, HTTP referrer domains, operating system family, general viewport dimensions, and approximate country of origin derived from GeoIP lookups without city-level or GPS precision.
Infrastructure Security and Edge Server Logs
To ensure platform availability, mitigate malicious distributed denial-of-service (DDoS) attacks, and enforce rate limits on automated scrapers, FoxyChef routes web traffic through Cloudflare edge network infrastructure. When your browser requests a page or asset, our servers automatically record standard HTTP transmission logs.
These connection logs may include: your device IP address, browser user-agent header, requesting URL, HTTP response code, and timestamp of the transaction. These logs are processed under our legitimate interest (GDPR Article 6(1)(f)) in securing our infrastructure against cybersecurity threats. Server logs are isolated from our editorial databases and automatically purged on a rolling 14-day cycle.
Direct Communications and Editorial Inquiries
If you communicate directly with FoxyChef by emailing our team (hello@foxychef.com, corrections@foxychef.com, or privacy@foxychef.com), we retain your email address, message body, and any attachments you provide. This information is processed exclusively to address your inquiry, investigate reported recipe corrections, or manage editorial correspondence.
We do not add your contact information to marketing mailing lists, nor do we disclose contact correspondence to third parties. Routine email correspondence is archived for up to 12 months for editorial continuity and subsequently deleted.
Third-Party Merchant Links & Outbound Tracking
Certain culinary guides, cookware reviews, and equipment comparison articles on FoxyChef contain outbound affiliate links pointing to third-party retailers (such as kitchenware manufacturers or culinary equipment stores). These outbound links route through our internal redirection endpoint (/go/{slug}/) and carry rel="sponsored nofollow" attributes.
When you click an outbound link and navigate to an external merchant’s website, that merchant operates under their own independent privacy policy and tracking practices. We do not control merchant cookies, shopping cart trackers, or payment processors, and we encourage you to review their respective disclosures upon leaving our domain.
Your Data Protection Rights (GDPR & CCPA/CPRA)
Depending on your jurisdiction, you hold specific legal rights regarding personal information:
- European Union and United Kingdom (GDPR): You have the right to request access to any personal data we hold about you (Article 15), rectification of inaccurate records (Article 16), erasure (“right to be forgotten”, Article 17), restriction of processing (Article 18), and data portability (Article 20). Because we do not collect personal identifiers during routine website browsing, we may require verification of identity if you request records associated with email correspondence.
- California Residents (CCPA / CPRA): You have the right to know what categories of personal information we collect, the right to request deletion of personal information, and the right not to receive discriminatory treatment for exercising your privacy rights. Notice of Non-Sale: FoxyChef does NOT sell personal information, nor do we share personal information for cross-context behavioral advertising as defined under California law.
To exercise any of your privacy rights or submit questions regarding our data practices, contact our Data Protection Officer at privacy@foxychef.com. We respond to all verified statutory requests within 30 calendar days.