Version 2, last updated 23 October 2026 (draft)
The short version: we store your name, email, your recipes and your plan details. Card details are handled by Stripe, never stored by us. We do not sell your data, we use no tracking or advertising cookies, and you can delete everything in one click.
SaucySums is run by Chris Fry, a sole trader in the UK, trading as SaucySums, who is the data controller for the personal data described here. Address: [CHRIS TO CONFIRM: business or service address, not a home address]. Contact: [email protected]. SaucySums is a new business in its launch phase. We are not required to appoint a Data Protection Officer [CHRIS TO CONFIRM]; please send any privacy question to [email protected].
The free Dish Profit Calculator runs in your browser. Nothing you type into it is saved on your device or sent to us. Please do not put other people's personal data into recipes or menus. SaucySums is not intended for children.
Allergen information you record is about your dishes, not about people, so we do not treat it as health data. We do not make automated decisions that have legal or similarly significant effects on you.
We use these service providers (processors). They may only use your data to provide their service to us. We do not sell your data or share it for advertising.
| Provider | What for | Where and safeguard |
|---|---|---|
| Cloudflare, Inc. | Hosting (Pages), database (D1), security, email routing to our inbox | Global network; data may be processed in the US and other countries. Safeguard: UK Extension to the EU-US Data Privacy Framework and/or the UK International Data Transfer Addendum in Cloudflare's data processing terms. [CHRIS TO CONFIRM] |
| Stripe Payments Europe, Ltd. and Stripe, Inc. | Payments, subscriptions, invoices and the billing portal | Ireland (EU, covered by UK adequacy regulations) and the US. Safeguard for US: UK Extension to the Data Privacy Framework and/or UK transfer addendum. [CHRIS TO CONFIRM] |
| Google LLC | Sign in with Google (if you choose it), and Gmail, where emails sent to [email protected] are stored | US and other countries. Safeguard: UK Extension to the Data Privacy Framework and/or UK transfer addendum. [CHRIS TO CONFIRM] |
| Microsoft Corporation | Sign in with Microsoft (if you choose it) | US and other countries. Safeguard: UK Extension to the Data Privacy Framework and/or UK transfer addendum. [CHRIS TO CONFIRM] |
| Brevo | Sending service emails | France (EU, covered by UK adequacy regulations). [CHRIS TO CONFIRM] |
When you sign in with Google or Microsoft, that company also acts as a separate controller under its own privacy policy. We may also share data if the law requires it, to protect our rights, or with a buyer if SaucySums is ever sold, in which case we will tell you.
Some of our providers process data outside the UK. Where they do, we rely on UK adequacy regulations (for the EU and for US companies certified to the UK Extension to the EU-US Data Privacy Framework) or on the UK International Data Transfer Agreement or Addendum, with a transfer risk assessment where required. Email us for more detail or a copy of the relevant safeguard.
We use one cookie only: a strictly necessary session cookie that keeps members signed in. It is HttpOnly, secure and expires. Strictly necessary cookies do not need consent under the Privacy and Electronic Communications Regulations (PECR), so we do not show a banner. The free calculator stores nothing on your device. Referral codes are passed in the link, not in a cookie. We use no analytics, advertising or tracking cookies or pixels. If that ever changes, we will ask for your consent first. See our cookie policy.
Data is sent over HTTPS, stored with our hosting provider and only accessible to us. If a personal data breach is likely to put your rights at risk, we will report it to the ICO within 72 hours of becoming aware of it, and tell you without undue delay if the risk is high.
Under UK data protection law you have the right to: be informed; access a copy of your data; correct it; have it deleted; restrict how we use it; data portability (get it in a reusable format); object to processing based on legitimate interests; and withdraw consent at any time. Many of these you can do yourself: export your data or delete your account from your account page. For anything else, email [email protected]. It is free, and we will reply within one month (we may extend this by two months for complex requests and will tell you if so). We may need to confirm it is you, usually by replying from your account email.
If you are unhappy with how we handle your data, please complain to us first at [email protected] with "Data protection complaint" in the subject. We will acknowledge it within 30 days, look into it, keep you updated and tell you the outcome without undue delay. You can also complain to the Information Commissioner's Office (ICO): ico.org.uk/make-a-complaint, or call 0303 123 1113.
We will update this notice if how we use data changes, and email members about important changes before they apply. The date at the top shows the latest version.