Privacy Policy

1. Data Controller

Mario Tigges – CreaTig
Teigelbrand 17
44269 Dortmund
Germany
E-Mail: info@creatig.de

2. Overview of Processing Activities

Rezeptkammer is a digital cookbook with open registration. Only the data necessary to operate the service and manage recipes is processed – no tracking, no advertising, no sharing of data with third parties for marketing purposes.

3. Hosting and Server Log Files

This website is operated on our own server in Germany. On every access, the web server automatically records connection data (IP address, date/time, requested URL, user agent, referrer) in log files. This data is used exclusively for system security (e.g. detecting attacks) and error analysis, and is automatically deleted after 30 days at the latest. The legal basis is our legitimate interest in secure and stable operation (Art. 6(1)(f) GDPR).

4. User Account and Login

Using Rezeptkammer requires a personal user account, which can be created via the registration page. We store a display name, a password stored in encrypted form, and the email address provided during registration, which also serves as the login name and is used to confirm the account and for password recovery. A technically necessary session cookie is set for login, which does not require consent (§ 25(2) No. 2 TTDSG). The legal basis is the performance of the usage agreement (Art. 6(1)(b) GDPR).

Additionally, a cookie is set for the chosen interface language (German/English), which displays the interface in the language requested by the user. This cookie is likewise technically necessary to provide the selected function and does not require consent (§ 25(2) No. 2 TTDSG). No further cookies – such as for analytics or marketing purposes – are set.

5. Recipes, Images, and AI-Based Recipe Recognition

When a recipe is added via a link, a photo, or entered text, this content is transmitted to Anthropic PBC (San Francisco, USA) for automated recognition (title, ingredients, preparation steps, etc.) via their Claude API. Where possible, already-structured recipe data from the source website (schema.org) is used instead, without any transmission to Anthropic being necessary. Since Anthropic is based in the USA, this constitutes a data transfer to a third country; it takes place on the basis of the EU Standard Contractual Clauses (Art. 46 GDPR) as part of the data processing agreement with Anthropic. Uploaded recipe images are stored on our own server under a random file name and used exclusively for display within your own cookbook or – if recipe sharing is enabled – for the people a recipe has been shared with. The legal basis is the performance of the usage agreement (Art. 6(1)(b) GDPR).

If a recipe is imported via a link from YouTube, Instagram, or TikTok, only our server retrieves the publicly accessible content of that link; no account or usage data is transmitted to these platforms in the process.

6. Shared Recipes, Public Links, and Shared Chambers

Recipes can be selectively shared with other users of the cookbook or made publicly accessible via a non-guessable link. In the latter case, the recipe, including images, can be viewed by anyone with the link until sharing is disabled again.

In addition, users can create shared “chambers” (shared recipe collections) and invite other users to them. Recipes copied into a chamber or imported there (including images) are visible and editable by all members of that chamber. Here too, the legal basis is the performance of the usage agreement (Art. 6(1)(b) GDPR), since the shared visibility within a chamber corresponds to a function expressly desired by the inviting or joining user.

An invitation to a chamber can also be sent by email address. If this address is not yet associated with any account, it is stored together with the chamber ID and a one-time notification email about the invitation is sent – the legal basis is our legitimate interest in technically implementing the function desired by the inviting user (Art. 6(1)(f) GDPR). If the account is not registered within a reasonable time, the invitation can be withdrawn by the inviting user at any time; in this state, there is no access to the chamber anyway.

7. Credits and Payment

New accounts receive a free starting credit balance; after that, topping up the balance is required for further recipe imports. Payment is processed either via PayPal (PayPal (Europe) S.à r.l. et Cie, S.C.A., Luxembourg) or via Stripe (Stripe Payments Europe, Ltd., Ireland – for credit card, Apple Pay, and Google Pay). When topping up, the payment data required for this is exchanged directly between you and the chosen payment service provider – we do not get to see any payment details (e.g. card number), only the confirmation and amount of the payment, in order to credit your balance accordingly. The privacy policies of PayPal (paypal.com/de/legalhub/privacy-full) and Stripe (stripe.com/de/privacy, Stripe processes data partly in the USA on the basis of the EU Standard Contractual Clauses under Art. 46 GDPR) additionally apply. The legal basis is the performance of the usage agreement (Art. 6(1)(b) GDPR). An internal record (amount, time, transaction number of the respective payment service provider) is stored for every top-up, which you can view at any time in your account under “Balance”.

8. Fonts

The fonts used, “Fraunces” and “Inter”, are served from our own server. No connection to third-party servers takes place in the process.

9. Retention Period

Account and recipe data are stored for as long as the user account exists. Upon request, the account and all associated data will be deleted; an informal message to the contact address given above is sufficient. Payment-related records (amount, time, PayPal transaction number) may, however, need to be retained for the legally required period even after account deletion, due to tax and commercial law retention obligations (§ 147 AO, § 257 HGB).

10. Your Rights

You have the right at any time to:

• Access to the data stored about you (Art. 15 GDPR)
• Rectification of inaccurate data (Art. 16 GDPR)
• Erasure of your data (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Object to processing (Art. 21 GDPR)

To do so, please contact the address given above. You also have the right to lodge a complaint with a data protection supervisory authority, such as the North Rhine-Westphalia State Commissioner for Data Protection and Freedom of Information, which is responsible for Dortmund.

11. Last Updated

This privacy policy was last updated on 07.09.2026.