Privacy policy
Updated 16 October 2026. This notice describes the implemented features and must reflect the actual hosting contracts and services.
1. Controller
Steiner MatthiasLochhauser Str. 88
82178 Puchheim
Deutschland
2. Hosting and security
Render processes access data needed for delivery and security, which may include IP address, date, requested file and browser identification. Where applicable, the legal basis is Article 6(1)(f) GDPR for secure operation and delivery. Hosting log retention depends on the actual settings and contracts and must be checked before publication.
3. Cookies and tracking
TasteGang uses no advertising trackers, web analytics scripts or marketing cookies. The admin area uses an essential session cookie. The community uses no tracking cookies or external CAPTCHA services. Exclusively essential access generally requires no consent banner under section 25(2) TDDDG. New services require reassessment.
4. Images and external resources
External recipe images, such as those from images.unsplash.com, technically transmit the visitor’s IP address to the image provider when loaded. This is not tracking by TasteGang but remains relevant to privacy. Lawfully usable images should preferably be served through our own hosting.
5. Ratings and comments
You may submit 1–5 stars, an optional comment and an optional display name without an account. Without a name, “Guest” is shown. Stars, name, comment and date are published only after manual moderation. Article 6(1)(a) GDPR may apply to voluntary publication; Article 6(1)(f) applies to necessary processing and abuse prevention where appropriate. Contributions are stored in the private GitHub repository. Deleted contributions may persist in older commits or backups; this architecture cannot guarantee complete historical deletion. Send deletion requests to the contact address and avoid personal information in comments.
6. Spam protection
A signed short-lived arithmetic challenge, a hidden form field and temporary pseudonymised network counters in memory limit automated submissions. Raw IP addresses are not stored in community files. Restarting clears counters. Google reCAPTCHA and Cloudflare Turnstile are not used.
7. Recipients and international transfers
Render and GitHub provide technical services. Depending on contracts, location and delivery, processing outside the EU/EEA is possible. The applicable agreements determine contractual safeguards and any standard contractual clauses.
8. Retention and your rights
Reviews remain until deletion or closure of the project. Older Git versions may persist; an appropriate deletion policy must be checked. Subject to GDPR, you have rights of access, rectification, erasure, restriction, portability and objection. Consent may be withdrawn for the future. You may complain to a data protection authority.
9. Contact and changes
For privacy questions, deletion requests and content complaints, use the contact details in the imprint. This notice is updated when technical or legal circumstances change.
10. Visitor statistics
We count page views, likely human visits and presumed crawler requests on the server to measure traffic with minimal data. Only daily totals, popular pages and bot categories are stored. For an approximate daily distinct-visitor figure, IP address and user agent are pseudonymised using a random secret kept temporarily in server memory; no such identifiers are saved or sent to GitHub. Anonymous daily aggregates are held in a private GitHub data branch and removed from the current statistics file after at most 90 days; older Git history may remain longer. No analytics cookies, device fingerprinting or third-party analytics scripts are used. The legal basis is our legitimate interest in improving the website through privacy-conscious statistics (Art. 6(1)(f) GDPR). You can object using the contact address in the imprint. Visitor and bot counts are estimates.