Privacy
Last updated 10 October 2026
withsalt is operated by Bloodstone Projects, the trading name of Lewis Banks, a sole trader based in England, of 33 Cavendish Square, London W1G 0PW (“we”). This page explains what we collect, why, where it is kept, and how to remove it. If anything here is unclear, ask us: the contact details are on the contact page.
What we collect
When you create an account: your email address, a password (stored only as a hash; we never see it), a username, and optionally a display name, bio, website and profile photo.
What you put on withsalt: recipes, posts, comments, ratings and notes, collections, the accounts you follow, any photos you upload, and direct messages you send. Most of this is public by design: a recipe you publish, and your profile, can be read by anyone. Direct messages are visible only to the people in the conversation.
Usage: anonymous, aggregated page views and product events (for example, that a recipe was saved) via Vercel Web Analytics. This is cookieless and is not tied to you as an individual.
Google Analytics, only if you accept: if you click Accept on our cookie banner, we also use Google Analytics, provided by Google LLC, to see which pages are useful. It sets cookies on your device and Google processes the data on our behalf. If you reject, it never loads. You can change your choice at any time here, and rejecting removes the cookies it set:
What we do not do
- We do not sell or rent your personal data.
- We do not run advertising or third-party ad trackers.
- We do not set analytics cookies unless you accept them on our cookie banner. Otherwise the only cookies set are the ones that keep you signed in.
Why we are allowed to hold it
We process your account details to provide the service you asked for (performance of a contract). We process content you publish because you chose to publish it. We keep aggregate usage statistics on the basis of our legitimate interest in understanding whether the product works. Because this data is anonymous, it cannot be traced back to you. Google Analytics runs only on the basis of your consent.
Where it is stored
Accounts, content and uploaded files are held by Supabase in the European Union (Ireland). The site is served by Vercel. If you accept analytics cookies, Google Analytics (Google LLC) also processes usage data. All act as processors on our instructions.
How long we keep it
For as long as your account exists. When you delete your account, your profile, recipes, posts, comments, ratings, collections, follows, messages and uploaded files are deleted immediately and permanently. Backups may retain copies for a short period before being overwritten.
Your rights
Under UK GDPR you can ask for a copy of your data, correct it, delete it, restrict or object to how we use it, and complain to the Information Commissioner’s Office.
You can delete your account yourself, at any time, from Settings. You do not need to ask us and we will not try to talk you out of it.
Children
withsalt is not intended for children under 13, and we do not knowingly collect their data. If you believe a child has an account, tell us and we will remove it.
Changes
If we change this policy in a way that materially affects you, we will say so on this page and update the date above.