Privacy policy

Your data, plainly

Kibblepaw is run from the EU, so we treat the GDPR as the baseline for everyone. This page explains what we collect, why, who else touches it, and how to get it back or deleted. No dark patterns, no surprise sale of your data — we don't sell it.

Last updated: 2026-06-04

What we collect

  • Account details. When you sign up with email, we store your email address and a securely hashed password (handled by our auth provider — we never see the plain password). If you sign in with Google, we receive your name, email address, and profile picture from Google. That's it — we don't request access to your contacts, Drive, or anything else.
  • Cat profiles. Anything you enter about your cat — name, breed, date of birth, weight, indoor/outdoor environment, neuter status, dietary preferences, allergens to avoid, and free-text notes. You choose what to put here; please don't enter anything sensitive about yourself in the notes field.
  • Saved recommendations. The personalized food picks we generate for each cat are cached against your account so they load instantly next time.
  • Usage analytics. We use DataFast, a privacy-focused, cookieless analytics tool, to measure aggregate traffic (which pages are visited, roughly from where). It doesn't build an advertising profile of you and the requests are proxied through our own domain.
  • Technical data. Like any website, our host processes your IP address to serve requests. We derive your country from it (via an edge header) to point "Buy at…" links at the right regional retailer. We don't store your IP for tracking.

How we use it

To run your account, save your cat profiles, generate personalized food picks, send you the account emails you'd expect (sign-up confirmation, password resets), understand how the site is used in aggregate, and — where you click an affiliate link — to be credited for the referral. Under the GDPR, our legal bases are performing our contract with you (the account and its features) and legitimate interest (security, basic analytics, affiliate attribution).

AI recommendations & OpenAI

When you use "Find food", we send your cat's profile (the fields listed above, including any notes) to OpenAI to rank suitable products. We send the cat's data, not your account email. OpenAI processes it solely to return the recommendation and, per its API terms, does not use API data to train its models. If you'd rather not involve a third-party model, you can simply not use the AI recommender — the rest of the site works without it.

Who else processes your data

We keep the stack small and use established providers, each only for what's named here:

  • Supabase — authentication and the database that stores your account and cat profiles.
  • Vercel — hosting and content delivery.
  • Resend — sending account and transactional emails.
  • OpenAI — generating food recommendations (see above).
  • DataFast — privacy-focused, cookieless usage analytics.
  • Google — only if you choose to sign in with Google.
  • Affiliate networks (Awin, Partnerize, Amazon) — only when you click a retailer link, the retailer or its network may set a cookie to attribute a purchase. We receive aggregate commission reports, not your individual order details.

We do not sell your personal data, and we don't run display ads.

Cookies

We use essential cookies to keep you signed in (set by our auth provider). Analytics is cookieless. The only non-essential cookies are the ones a retailer sets after you click one of their links to leave our site — those are governed by that retailer's own privacy policy.

Keeping & deleting your data

We keep your account and cat profiles for as long as your account exists. Ask us to delete your account and we'll remove your personal data and cat profiles, except anything we're legally required to retain. You can also clear individual cat profiles yourself from your account at any time.

Your rights

Under the GDPR you can ask us to access, correct, export, or delete your personal data, and to object to or restrict certain processing. We'll respond within the legal timeframe. You also have the right to complain to your local data protection authority. To exercise any of these, email privacy@kibblepaw.com.

Children

Kibblepaw is a cat-food reference site for adults. It isn't directed at children and we don't knowingly collect data from them.

Changes & contact

If we change how we handle data, we'll update this page and the date at the top. For any privacy question, reach us at privacy@kibblepaw.com. For factual corrections to a product page, use corrections@kibblepaw.com.