Privacy & cookie policy
Last updated: 27 September 2026
This policy explains what personal information is collected when you visit shy-scene-486b.trglimitedltd.workers.dev ("the site"), why, who it is shared with, and the choices and rights you have. It is written to meet the UK GDPR and Data Protection Act 2018, the Privacy and Electronic Communications Regulations (PECR), the EU GDPR and ePrivacy rules, and US state privacy laws such as the California Consumer Privacy Act (CCPA/CPRA) and the California Online Privacy Protection Act (CalOPPA).
1. Who we are
The site is run by the independent owner of Simmer & Salt, based in the United Kingdom, who is the "controller" of your personal data under UK and EU data protection law. You can contact us about anything in this policy at hello@yourdomain.com. We are not required to appoint a Data Protection Officer.
2. What we collect and why
You can read the whole site without an account, and we have no sign-up, comments or contact forms. We only handle the following:
| Information | Why we use it | Legal basis (UK/EU) |
|---|---|---|
| Technical data: IP address, browser and device type, pages requested, date and time | To deliver pages, keep the site secure and stop abuse. Handled by our host, Cloudflare. | Legitimate interests (running a secure website) |
| Advertising data: cookie and device identifiers, IP address, approximate location, pages viewed and ad interactions | To show adverts that pay for the site, measure them and prevent ad fraud. Collected by Google and its advertising partners. | Your consent (for cookies and personalised ads); legitimate interests for non-personalised ads and fraud prevention |
| Your emails: your name, email address and whatever you write, if you email us | To reply to you and keep a record of the conversation | Legitimate interests (answering your message) |
We do not sell your personal information for money, and we do not use it to make automated decisions that have legal or similarly significant effects on you. We never knowingly collect sensitive information (such as health data). Our recipes' diet tags are for browsing only and nothing about what you view is linked to you by us.
3. Cookies and similar technologies
Cookies are small files saved on your device. Simmer & Salt itself does not set any cookies and does not use analytics. Cookies and similar technologies on the site come from these third parties:
| Provider | Examples | Purpose | Typical duration |
|---|---|---|---|
| Google (consent tool) | FCCDCF, FCNEC | Strictly necessary: remembers your privacy choices | Up to 13 months |
| Google AdSense and its certified ad partners | __gads, __gpi, __eoi, IDE, DSID, NID | Advertising: showing, personalising and measuring ads; frequency capping; fraud prevention | Up to 13 months |
| Cloudflare (our host) | __cf_bm (only if bot protection is triggered) | Strictly necessary: security | 30 minutes |
Your consent (UK, EEA and Switzerland). Advertising cookies are only used after you agree. When you first visit, a consent message from Google (a consent tool certified under the IAB Transparency & Consent Framework) lets you accept, reject or choose by purpose and by partner. Rejecting is as easy as accepting, and you can still use the whole site. If you reject, you may see non-personalised or limited ads, which use only contextual information such as the page you are reading.
Changing your mind. You can withdraw or change your consent at any time using the "Privacy & cookie settings" button (in the footer of every page and below), or by clearing cookies in your browser.
More about Google's use of data: How Google uses information from sites that use its services. You can also manage personalised ads at Google Ads Settings, Your Online Choices (UK/EU) and aboutads.info (US).
Images. Recipe photos are served from Unsplash's servers (images.unsplash.com), which receive your IP address and browser details in order to send the image. Unsplash does not set advertising cookies through our pages. Fonts are your device's own, so no font service is contacted.
4. Who we share it with
- Cloudflare, Inc.: website hosting, delivery and security (our processor).
- Google Ireland Ltd / Google LLC: advertising through AdSense and our consent tool. Google acts as an independent controller for some ad purposes. Google's business privacy information.
- Google's certified advertising partners: only where you have consented (UK/EEA) or not opted out (US). The full list is shown in the consent message.
- Unsplash: image delivery, as described above.
- Our email provider: if you email us, your message is stored in our mailbox.
- Authorities or advisers: only if required by law or to protect our legal rights.
5. International transfers
Some of these providers process data in the United States and other countries. Where personal data leaves the UK or EEA, it is protected by an adequacy decision (such as the EU–US Data Privacy Framework and its UK Extension, for certified companies) or by the European Commission's Standard Contractual Clauses and the UK International Data Transfer Addendum.
6. How long we keep it
- Emails: up to 24 months after our last exchange, then deleted.
- Hosting logs: kept by Cloudflare for a short period in line with its own policies.
- Advertising cookies: see the table above; Google's retention is described in its privacy policy.
7. Your rights (UK & EU)
You have the right to: access the personal data we hold about you; have it corrected; have it deleted; restrict or object to how we use it (including an absolute right to object to direct marketing); data portability; and withdraw consent at any time without affecting what happened before. Most information collected for advertising is held by Google rather than by us, and we will point you to the right place if so.
To make a request, email hello@yourdomain.com. We will reply within one month, free of charge, and may need to confirm your identity. If you are unhappy, you can complain to the UK Information Commissioner's Office or, in the EU, to your local data protection authority. We would appreciate the chance to help first.
8. Your rights (US residents)
Notice at collection. In the last 12 months the categories of personal information collected through the site were: identifiers (IP address, cookie and device IDs); internet or other electronic network activity (pages viewed, ad interactions); approximate geolocation derived from IP address; and, if you email us, the contents of your message. They are used for the purposes in section 2 and kept for the periods in section 6. We do not collect sensitive personal information.
"Selling" and "sharing" for targeted advertising. We don't sell personal information for money. However, allowing Google and its partners to use cookies for personalised ads may count as "selling" or "sharing" under California and other state laws (including Virginia, Colorado, Connecticut, Utah, Texas, Oregon and others).
- Opt out: use the "Do Not Sell or Share My Personal Information" link in the footer (shown where the law applies) or below, or email us.
- Global Privacy Control: if your browser sends a GPC signal, the site automatically requests non-personalised ads for your visit.
- Other rights: depending on your state, you can ask to know, access, correct or delete your personal information and appeal a decision we make. Email hello@yourdomain.com with "Privacy request" in the subject. We will not discriminate against you for using these rights. An authorised agent may make a request for you with your written permission.
- Do Not Track: there is no agreed standard for browser "Do Not Track" signals, so we respond to Global Privacy Control instead.
9. Children
The site is for a general adult audience and is not directed at children. We do not knowingly collect personal information from children under 13 (US COPPA) or under 16 (UK/EU), and advertising on the site is not personalised on the basis of any known age. If you believe a child has sent us personal information, email us and we will delete it.
10. Changes and contact
We will post any changes here with a new "last updated" date, and tell you on the site if a change is significant. Questions or requests: hello@yourdomain.com.