Privacy Policy
We collect only what we need to run your account and the app: your email, display name and the formulas, stash and community content you create. We don't use advertising or analytics trackers, and we never sell your data. Your community posts, comments and ratings are visible to other members with your display name. You can download a copy of your data or delete your account yourself in Settings at any time, or ask us by emailing contact@formularium.dev.
Who we are
Formularium is operated by Lampros Polyzos, Katerou 8, 47132, Arta ("we", "us"). We are the data controller for the personal data described here. Contact us about anything in this policy at contact@formularium.dev.
What we collect
Account information
- Email address and password. Your password is stored only as a secure hash by our authentication provider; we never see it.
- Google sign-in. If you choose "Continue with Google", Google shares your name, email address and profile picture link with us.
- Display name that you choose in Settings and that appears next to your community activity.
Content you create
- Formulas, phases, percentages, batch sizes, target pH and marketing claims you save in the Studio.
- Your stash (ingredients you own, amounts, prices), containers, favorites and starred ingredients.
- Batch records: lot numbers, the ingredients and weights of batches you make, your notes, and stability check-ins.
- Community posts, recipe versions, comments, ratings and reviews (including skin type, if you choose to give it) and notifications, plus reports you send about other members' content and the members you mute.
- Reports are visible to you and to community moderators. The person you report is not told who reported them.
Technical information
- When you use the app, our providers process your IP address and basic device and browser information to deliver the service, keep it secure and prevent abuse.
- When you sign in, Cloudflare Turnstile checks that you are not a bot using signals from your browser.
- When you print a PDF (batch ticket, shopping list, product information file, sourcing guide), your formula is sent to our server to build the document. It is not stored after the PDF is returned.
Storage in your browser
We don't use advertising or analytics cookies. We store only what the app needs to work, in your browser's local storage:
| What | Why | How long |
|---|---|---|
| Sign-in session | Keeps you logged in | Until you sign out |
| Preferences (currency, date format, stash low-stock warning) | Remembers your settings | Until you clear them |
| Editor choices (tour seen, auto-balance, stash check hidden) | Avoids asking again | Until you clear them |
| Page to return to after sign-in | Brings you back where you were | Removed after use |
These are strictly necessary for the service, so no consent banner is required for them. If we ever add optional cookies or analytics, we will ask first.
How we use it, and why
| Purpose | Legal basis (GDPR) |
|---|---|
| Create and run your account, save your formulas and stash, generate PDFs | Performing our contract with you |
| Show your community posts, comments and ratings to other members | Performing our contract with you |
| Send notifications about activity on your posts | Performing our contract with you |
| Keep the service secure, prevent spam and abuse (e.g. bot checks) | Our legitimate interest in a safe service |
| Answer your messages and requests | Performing our contract / legitimate interest |
| Meet legal obligations | Legal obligation |
We don't use your data for advertising, we don't sell it, and we don't make automated decisions that have legal or similarly significant effects on you. The health checks, substitutions and suggestions in the app are tools for your formulas, not decisions about you.
Who can see your content
- Private by default: your formulas, stash, containers and favorites are visible only to you.
- Visible to members: community posts, recipe versions, comments, ratings and reviews are shown to other signed-in members with your display name.
- Visible to everyone: formula posts you share may appear as a preview (title, a short excerpt and tags) on the public home page. The blog contains only articles we write; nothing members post is published there.
Service providers we share data with
We use a small number of providers who process data on our behalf under data processing agreements:
| Provider | What for | Data |
|---|---|---|
| Supabase (us-east-1) | Database, authentication and file storage | Account data and everything you create |
| Vercel (USA) | Hosting the website and the PDF/validation server | Request data, formulas sent for PDFs and checks |
| Cloudflare (Turnstile) | Bot protection at sign-in | IP address and browser signals |
| Optional "Continue with Google" sign-in | Your Google name, email and profile picture link |
Some providers may process data outside the EU/UK. Where they do, the transfer is covered by the European Commission's Standard Contractual Clauses or an adequacy decision.
We may also disclose data if the law requires it, or to protect the rights and safety of our users or others.
How long we keep it
- Account data and your content: for as long as you have an account.
- When you delete your account in Settings (or ask us to), your data is removed from our database straight away. Copies in backups are overwritten on a rolling basis, within 30 days.
- Community posts and comments are deleted with your account. Where deleting a comment would break a discussion, we may instead remove your name and keep the text anonymously.
- Our sign-in security log (when you sign in, reset your password or confirm your email, with the time, your IP address and browser, never your password): 90 days, to spot and stop attacks. It is included in the copy of your data you can download.
- If you turn on two-step verification: your authenticator secret (stored encrypted) and your recovery codes (stored only as one-way hashes), until you turn it off or delete your account.
- Security logs kept by our providers: for the short period they need them.
Your rights
Depending on where you live (including under the EU and UK GDPR), you have the right to:
- access the personal data we hold about you and get a copy;
- correct inaccurate data (you can change most of it yourself in the app);
- have your data deleted;
- receive your data in a portable format;
- object to, or ask us to restrict, certain processing;
- withdraw consent at any time, where we rely on consent;
- complain to your local data protection authority.
You can download a copy of your data and delete your account yourself: open Global Settings from your profile menu and look under "Your data". For any other right, or if you prefer, email contact@formularium.dev from the address linked to your account. We reply within one month.
Children
Formularium is not intended for anyone under 16. We don't knowingly collect data from children; if you believe a child has created an account, contact us and we will delete it.
Security
Data is encrypted in transit (HTTPS), passwords are hashed, and access to your private data is restricted by database access rules so other users can't read it. No system is perfectly secure, so please use a strong, unique password.
Changes to this policy
We will update this page when our practices change and change the "last updated" date. If a change is significant, we will tell you in the app or by email before it takes effect.
Contact
Lampros Polyzos, Katerou 8, 47132, Arta. Email: contact@formularium.dev.