Privacy Policy

This page explains which data is processed when using Cokes Pizza, and which tracking elements are deliberately not used.

General privacy

  • No analytics tools
  • No advertising trackers
  • No personalized advertising
  • No external fonts
  • No user profiles
  • No persistent access logs
  • No automated decision-making
  • No profiling
  • No intended third-country data transfer

IP addresses are processed briefly for technical transmission only and are not stored permanently in access logs. The hosting provider is not named for now; the technical systems are self-hosted on a rented VPS in Germany.

Contact form and ticket system

Data processed: name, email address, subject, message, an automatically generated ticket number, processing status, and creation/update timestamps.

Purposes: handling and answering inquiries, matching replies to the correct thread, managing processing status, protection against abuse and spam, and documentation of inquiries that are not yet resolved.

Legal basis: general inquiries, recipe ideas and correction notes under Art. 6(1)(f) GDPR; business or pre-contractual inquiries under Art. 6(1)(b) GDPR; statutory retention obligations, where applicable, under Art. 6(1)(c) GDPR.

Retention: automatic deletion no later than six months after an inquiry is resolved. Longer retention only applies for statutory retention obligations, ongoing proceedings or necessary legal defense. The ticket system and its data are kept exclusively on our own server.

Theme setting

Storage location: localStorage in your browser. Key: cp-theme. Value: light or dark. Purpose: remembering your chosen display mode, without transmission for profiling. It is kept until you clear your browser data or change the setting. This is a technically required function under Section 25(2) No. 2 TDDDG (German Telecommunications-Digital-Services-Data-Protection Act).

Star ratings

Cookie: cp_rating_id, containing a randomly generated UUID, stored for exactly two years (no additional seven-day extension), with attributes HttpOnly, Secure, SameSite=Lax, path /. Purpose: recognizing the same browser, showing your own rating, and limiting repeated ratings. Not used for advertising, analytics or cross-site tracking. Cookie lifetime has no bearing on SEO.

Additional browser storage: key cp-rating-id:<recipe-id>, storage location localStorage, containing the star rating you submitted, purpose is local display of your own rating, kept until you clear your browser data.

Stored on the server: a SHA-256 hash of the random cookie ID, the recipe ID, the star rating from 1 to 5, and the time of the last update. The cookie ID is never stored in plain text, and the IP address is not stored permanently.

Abuse protection: the IP address is technically received; for rate-limiting, a short-lived, non-reversible HMAC value is generated (ten-minute window). IP addresses are not added to permanent access logs.

Legal basis: storage on your device under Section 25(2) No. 2 TDDDG; processing of the rating and abuse protection under Art. 6(1)(f) GDPR. Legitimate interest: reliable average ratings and protection against repeat voting.

Review comments

Possible data: star rating, optional comment, optional public display name, recipe association, publication/edit timestamps, and moderation status.

Purposes: publishing genuine user experiences, helping other visitors, checking for spam, abuse and unlawful content, and displaying comments alongside the rated recipe page.

Legal basis: star rating and abuse protection under Art. 6(1)(f) GDPR; publishing an optional name and comment under Art. 6(1)(a) GDPR following transparent consent.

Retention: until a deletion request, until the related recipe is removed, or until the website or its rating feature is permanently discontinued. Unlawful, abusive or spam content may be removed earlier.

Deletion: you can request deletion by email or via the contact form. Please include the recipe URL, display name, comment content and approximate date where possible. Consent can be withdrawn at any time with effect for the future.

Your rights

  • Access
  • Rectification
  • Erasure
  • Restriction of processing
  • Data portability, where applicable
  • Objection to processing based on legitimate interests
  • Withdrawal of consent
  • Complaint to a data protection supervisory authority

Contact for privacy requests: info@cokespizza.com

Operator

Cokes Pizza
Innsbrucker Straße 5, 79111 Freiburg, Germany
Email: info@cokespizza.com