Privacy Policy

Introduction

Cookoff ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our cook-off voting platform and related services (the "Service").

By using Cookoff, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our Service.

Information We Collect

Personal Information

When you register for an account or use our Service, we may collect:

• Email address
• Name
• Profile information
• Password (encrypted)

Voting and Event Data

When you participate in or organize cook-off events, we collect:

• Votes and scores you submit
• Comments and feedback
• Event preferences and settings
• Photos of food entries (if uploaded)
• Rubric scores and judging criteria responses

Usage Information

We automatically collect certain information about your device and how you interact with our Service:

• IP address
• Browser type and version
• Device information
• Pages visited and features used
• Time and date of visits
• Error logs and diagnostic data

Mobile App Data

When you use our iOS app, we may additionally collect:

• Device identifiers
• Push notification tokens (if you enable notifications)
• Biometric authentication data (stored locally on your device only)
• Camera access (only when taking photos of entries)

How We Use Your Information

We use the information we collect for the following purposes:

• To provide and maintain our Service
• To process and tabulate votes in cook-off events
• To send you voting invitations and event notifications
• To communicate with you about your account or events
• To improve and optimize our Service
• To detect, prevent, and address technical issues or fraud
• To comply with legal obligations
• To calculate and display real-time results and winner announcements

Data Sharing and Disclosure

We do not sell your personal information. We may share your information in the following circumstances:

Within Your Events

Event organizers and collaborators can see:

• Voter names and email addresses for events you participate in
• Your votes, scores, and comments (within that event)
• Your participation status

Service Providers

We use third-party service providers to help us operate our Service:

• Supabase - Database and authentication services
• Vercel - Hosting and deployment
• Resend - Email delivery

Legal Requirements

We may disclose your information if required by law or in response to valid legal requests.

Data Security

We take the security of your data seriously and implement industry-standard measures to protect it:

• Encrypted data transmission (HTTPS/TLS)
• Encrypted password storage using bcrypt
• Row-level security policies in our database
• Secure authentication with session tokens
• Regular security updates and monitoring
• Biometric data (Face ID/Touch ID) stored only locally on your device

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee its absolute security.

Data Retention

We retain your information for as long as necessary to provide our Service and fulfill the purposes outlined in this Privacy Policy:

• Account information is retained until you delete your account
• Event data is retained as long as the event exists
• Votes and results are retained to maintain event integrity
• Usage logs are retained for up to 90 days

You can delete your account directly in the app from Profile → Delete Account. We process deletion immediately, clear active sessions, and anonymize account profile data while preserving de-identified event history required for leaderboard integrity.

Your Rights and Choices

You have the following rights regarding your personal information:

• Access - Request a copy of your personal data
• Correction - Update or correct your information
• Deletion - Request deletion of your account and data
• Export - Download your data in CSV format
• Opt-out - Unsubscribe from marketing emails (account-related emails may still be sent)

To exercise these rights, use in-app settings when available (including account deletion) or contact privacy@cookoff.app for support requests.

Children's Privacy

Our Service is not directed to individuals under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us so we can delete it.

International Data Transfers

Your information may be transferred to and processed in countries other than your own. These countries may have different data protection laws. By using our Service, you consent to the transfer of your information to these countries.

Cookies and Tracking Technologies

We use cookies and similar tracking technologies to improve your experience:

• Session cookies - To keep you logged in
• Preference cookies - To remember your settings
• Analytics - To understand how you use our Service

You can control cookies through your browser settings, but some features may not work properly if you disable them.

Third-Party Links

Our Service may contain links to third-party websites. We are not responsible for the privacy practices of these sites. We encourage you to read the privacy policies of any third-party sites you visit.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. You are advised to review this Privacy Policy periodically for any changes.

Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us: