Privacy
What we keep
Short version: an email address if you hand us one, and nothing else. The adverts are Google's, and their cookies are Google's too. Updated 29 September 2026.
Saved recipes and ticked ingredients
These live in your own browser's local storage, on the device you used. They are never sent to us and we cannot see them. Clearing your browser data deletes them, and they do not follow you to another device.
The newsletter
If you sign up, we store your email address, the date, and the country your request came from. That is used to send the weekly email and nothing else. Every email has a one-click unsubscribe link, and unsubscribing deletes the record.
We do not sell, rent or share the list.
To stop the form being used to flood us, the sign-up is limited to a few addresses an hour from the same connection. Counting that needs to tell one connection from another for an hour, and it does that by hashing your IP address together with the hour, keeping only the hash, and throwing the whole thing away when the hour is up. The address itself is never written down, and a hash of it cannot be turned back into one.
Advertising
The site shows adverts through Google AdSense. When an advert loads, Google and other third-party vendors set cookies, and Google's advertising cookie (the DoubleClick cookie, or an advertising ID on a phone) lets them show you adverts based on your earlier visits to this site and to other sites. We never see who you are: Google receives the same request every site that shows its adverts sends it.
You can turn personalised advertising off at google.com/settings/ads. Google explains how it uses information from sites that show its adverts at policies.google.com/technologies/ads.
If you are in the EEA or the UK, Google shows you a consent message before any personalised advert, and the choice you make there is kept by Google, not by us.
Analytics
The site runs no analytics scripts of its own, and the only cookies set while you read it are the advertising cookies described above. If that changes, this page changes first, and any analytics used will be cookieless and aggregate.
The cookie notice itself
The notice has to remember your answer or it would ask on every page. That answer is the one thing this site stores on your device: a single entry in your browser's local storage under creamyslice:consent, holding the word accepted or declined and the date. It is not a cookie, it is never sent to us, and declining is a real decline rather than a smaller banner. Clearing your browser data removes it and the notice asks again.
Fonts
Typefaces load from Google Fonts, which means your browser makes a request to fonts.gstatic.com and Google sees your IP address as part of that. Fonts and the adverts above are the two third parties the site touches, and both are Google.
Your rights
You can ask what we hold about you, ask for it to be corrected, or ask for it to be deleted, by emailing hello@candykitchen.net. Since the only thing we hold is a newsletter email address, deletion is immediate and total.
Changes
If this policy changes, the date at the top changes with it.