Privacy Policy

1. Who we are

URCOOKD.com is operated by Melius cras, MB (registry code 304502341), which runs the website urcookd.com and the "Am I Cooked?" digital service.Melius cras, MB is the data controller for personal data processed through the service.

Contact: urcookdcom@gmail.com

Registered address: J. Kubiliaus g. 1-52, LT-08238 Vilnius, Lithuania

2. What we collect

• Account data: email address and authentication identifiers when you sign in (e.g. via Google).
• Usage data: the health claims you submit, generated risk scores, and search history tied to your account.
• Payment data: handled by Stripe; we receive only the transaction status and a customer reference, never card details.
• Technical data: IP address, browser type, device data, and basic logs for security and debugging.
• Optional location: approximate location (city) for the city risk leaderboard — only when you opt in.

3. Why we use it (GDPR legal bases)

• Contract: to provide the service you signed up for.
• Legitimate interest: security, abuse prevention, product analytics.
• Consent: optional location features and marketing emails (if any).
• Legal obligation: tax records, lawful requests.

4. Sharing

We share data only with processors needed to run the service:

• Supabase (database & auth hosting)
• Cloudflare (hosting & DDoS protection)
• Stripe (payments)
• Google (authentication, if you choose)
• AI model providers (to generate risk verdicts from the claim text you submit — never your email)

We do not sell your personal data.

5. International transfers

Some processors are located outside the EEA (e.g. USA). We rely on Standard Contractual Clauses or equivalent safeguards.

6. Retention

Account and usage data is kept while your account is active and up to 24 months after deletion request for legal/accounting reasons. Payment records are kept 10 years as required by Lithuanian tax law.

7. Your rights (GDPR)

You can request access, correction, deletion, restriction, portability, or object to processing. To exercise any right, email urcookdcom@gmail.com. You may also complain to the Lithuanian State Data Protection Inspectorate (VDAI).

8. Cookies

We use strictly necessary cookies for authentication and session management. We do not use advertising cookies. Anonymous analytics may be added later — this policy will be updated and consent requested where required.

9. Security

Data is encrypted in transit (HTTPS) and at rest by our hosting providers. Access is restricted to authorised personnel only.

10. Children

The service is not intended for users under 16. We do not knowingly collect data from children.

11. Changes

We may update this policy. Material changes will be announced on the site or via email.