Privacy Policy

Last updated: September 2026

This policy explains which personal data The Sunday Pot processes, why, for how long and with whom, and what your rights are. It applies the General Data Protection Regulation (GDPR) and the French Data Protection Act.

Data controller

The data controller is the site's publisher, a private individual (see the legal notice). For any question about your data, or to exercise your rights, write to contact@thesundaypot.com.

The data we process

The contact form

When you write to us, we receive your name, your email address and your message, to reply to you and for nothing else. The Web3Forms service delivers the message to us.

Recipe ratings

When you rate a recipe, we record:

  • The rating, from 1 to 5, and the recipe it is for.
  • A randomly drawn identifier, which says nothing about you, kept in the tsp_v cookie. It lets us count only one rating per person and lets you change yours.
  • The date of the rating.
  • A hash of your IP address, computed with a secret key. The address itself is never stored. The hash serves only to limit abuse, to 30 ratings per hour at most from the same address. The IP address hash is erased within 24 hours.

Technical data

To display the site and protect it, our host Cloudflare processes technical data, including your IP address, your browser type, the pages requested, and the date and time. The logs of the site's server functions are kept for a few days, seven at most.

The site uses no analytics tool, no advertising and no embedded social media button. Its fonts are hosted on the site itself, so your browser contacts no third-party service to display them.

Legal bases

  • Contact form. Your consent, which you give by sending your message.
  • Ratings. Our legitimate interest in providing the rating service you use, by counting one rating per person and preventing abuse.
  • Technical data. Our legitimate interest in keeping the site running and secure.

Retention periods

  • Contact messages. As long as it takes to handle your request, then three years at most after our last exchange. Web3Forms keeps a copy for three years at most.
  • Ratings and voter identifier. As long as the recipe is online.
  • IP address hash. 24 hours at most.
  • The tsp_v cookie. 13 months.
  • Technical logs. A few days, seven at most.

Recipients

Your data is never sold, rented or used for advertising. Only two service providers process it on our behalf:

  • Cloudflare, Inc., which hosts the site, its server functions and the ratings database (its privacy policy).
  • Web3Forms, which delivers the messages from the contact form (its privacy policy).

Transfers outside the European Union

Cloudflare, Inc. is a US company, and Web3Forms stores messages with Amazon Web Services. Your data may therefore be processed outside the European Union. Cloudflare, Inc. takes part in the EU–US Data Privacy Framework, which governs these transfers. For Web3Forms, see its privacy policy.

Cookies

The site sets a single cookie, tsp_v, and only when you rate a recipe. It holds the randomly drawn identifier described above, signed by the site so that it cannot be forged. It is used to count only one rating per person and to let you change yours. The cookie expires after 13 months.

This cookie is strictly necessary for the rating service you ask for. Under the guidelines of the CNIL, the French data protection authority, it therefore does not require your consent, and the site shows no cookie banner. No advertising, analytics or social media cookie is set. You can delete this cookie at any time in your browser settings. Your next rating will then count as that of a new person.

Your rights

You have the right to access, rectify, erase, restrict and port your data, the right to object, and the right to withdraw your consent at any time. You can also set instructions for what happens to your data after your death. To exercise these rights, write to contact@thesundaypot.com.

A rating does not reveal who left it. To have yours deleted, tell us which recipe it is for and, if possible, the value of the tsp_v cookie in your browser. Without it, we cannot find your rating among the others.

If, after contacting us, you believe your rights are not being respected, you can file a complaint with the CNIL (www.cnil.fr).

Security

The site is served over HTTPS only. The voter identifier is signed, and the IP address is never stored in clear in the ratings database. We take reasonable measures to protect your data against loss, alteration or unauthorized access.

Minors

The site is not aimed specifically at children. If you are under 15, ask a parent or guardian for permission before using the contact form.

Changes

We may change this policy to keep up with changes to the site or to the law. The version in force is the one published on this page, with its date of last update.

Contact

For any question about this policy or about your data, write to contact@thesundaypot.com.