Pasty Hunter — Privacy Policy
Last updated: 27 September 2026
This policy explains what personal data Pasty Hunter (“the App”, “we”, “us”) collects, how it’s used, and your rights over it.
1. Who we are
Pasty Hunter is operated by James Garforth, contactable at support@pastyhunter.com. We are the data controller for information collected through pastyhunter.com.
2. What we collect
- Account details: name and email address, used to create and manage your account.
- Ratings and reviews: scores you give (overall, size, taste, price), prices you log, and written reviews.
- Location data: locations you associate with pasty traders (e.g. tagging where you bought a pasty). This is user-submitted trader location data, not continuous device tracking, unless you grant browser location permission, in which case we only use it at the moment you submit a rating.
- Usage stats: derived figures such as total spend and average pasties per month, calculated from the data above.
- Technical data: IP address, browser type, and similar data collected automatically by our hosting and email providers as part of normal operation.
3. How we use it
We use your data to:
- Provide your account and consumption history
- Display ratings, reviews and trader locations to other users
- Generate your personal stats
- Screen written review notes for potentially harmful content before saving them
- Send account-related emails (e.g. sign-up confirmation, password reset)
- Maintain and secure the App
4. Legal basis for processing
Where UK/EU data protection law (UK GDPR) applies, we process your data on the basis of:
- Contract: to provide the service you’ve signed up for
- Consent: for optional features such as location tagging
- Legitimate interests: for basic security and service reliability
5. Who we share it with
We use third-party service providers to run Pasty Hunter. Each processes data on our behalf under their own security and data protection terms:
| Provider | Purpose | Data involved |
|---|---|---|
| Supabase | Database hosting — stores account, rating, review and location data | All user-submitted data |
| Vercel | Application hosting and deployment | Technical/request data |
| Resend | Transactional email (SMTP) | Email address, email content |
| OpenAI | Automated safety screening before a written review is saved | Review notes and the moderation result; no account details |
| Cloudflare | Domain registration and DNS | Technical/routing data |
OpenAI states that API data is not used to train its models unless the customer opts in. By default, review text and moderation results may be retained in abuse-monitoring logs for up to 30 days. See OpenAI's API data controls.
We do not sell your data. We do not share it with advertisers.
6. Where your data is stored
Your database is hosted in the EU (Ireland) via Supabase. The application is served via Vercel’s global edge network. Review notes are also sent to OpenAI’s API for moderation; Pasty Hunter does not configure a regional processing location for those requests.
7. How long we keep it
We retain your account and activity data for as long as your account is active. If you delete your account, we immediately disable sign-in and anonymise your profile. Within 30 days, we permanently delete the account and remove its identity links from reviews and reports. Review scores, notes, and linked photos remain as anonymous community content; report details remain for moderation history. We may retain other information where the law requires it.
8. Your rights
If UK GDPR applies to you, you have the right to:
- Access the personal data we hold about you
- Correct inaccurate data
- Delete your data (“right to be forgotten”)
- Export your data in a portable format
- Object to or restrict certain processing
- Complain to the ICO (ico.org.uk) if you believe we’ve mishandled your data
Download a copy of your data from Settings. For other requests, contact us at support@pastyhunter.com.
9. Cookies and local storage
Pasty Hunter uses one type of cookie: a session cookie set by our authentication provider, Supabase, to keep you signed in. It stores an access token and a refresh token and is strictly necessary for the App to work — we don’t use analytics or advertising cookies, and this cookie is not used for tracking. Because it’s strictly necessary, no separate cookie consent banner is shown.
10. Age restriction
Pasty Hunter is for users aged 18 and over only. We do not knowingly collect data from anyone under 18.
11. Security
We rely on the security measures provided by Supabase, Vercel, Cloudflare, Resend and OpenAI, along with standard practices such as HTTPS-only connections. No system is 100% secure, but we take reasonable steps to protect your data.
12. Changes to this policy
We may update this policy from time to time. We’ll update the “last updated” date above and, for material changes, notify users by email.
13. Contact us
Questions or requests about this policy: support@pastyhunter.com.