Controller and contact
The controller is Axel O'Dell. For privacy questions or to exercise your rights, email sibellutu@gmail.com.
Scope
This policy covers Sibellutu Pizza Lab, available as a PWA and Android app, and will also apply to the iOS version before it is distributed. The app does not require an account, registration or login.
Pizza Lab is a personal journal for dough experiments and recipes. It is not a cloud-storage or social-network service.
Recipes, notes and photos stay on your device
Recipe cards can contain ingredients, procedures, timings, ratings, notes, tags and photos. This content is stored locally in the browser or in the app's device storage, using IndexedDB.
Pizza Lab does not automatically send recipes, card names, notes, ratings or photos to a server operated by the developer. Language preferences, offline technical data and archive-migration information also remain on the device.
In the PWA, the Service Worker and Cache Storage make app resources available offline; they are not a remote backup of your personal archive.
Aggregated technical statistics
The PWA and mobile apps send a technical event to /api/pizzalab-metrics, such as opening the app, creating or editing a card, importing, exporting, creating a backup or opening the guide. The payload contains the event name and app version.
The server stores only aggregated and daily counters with an update timestamp. This database does not store recipes, photos, free text, names, email addresses, advertising identifiers or device identifiers.
To understand feature use, identify technical issues and improve the app without profiling users. The controller relies on legitimate interests in operating, securing and improving the service (Article 6(1)(f) GDPR); you may object where applicable by contacting us.
Requests pass through Cloudflare infrastructure. Like any HTTPS connection, the provider may process IP addresses and technical network metadata according to its settings and privacy notice. Our application does not add that metadata to the counter database.
PWA, cookies and web analytics
The PWA may use Cloudflare Zaraz and Google Analytics 4 to measure website traffic and web interactions. Those tools are not loaded in the Android or iOS app WebViews.
Where such tools use non-essential cookies or similar technologies, they are activated in the PWA only after consent for the Statistics and analytics purpose where required by applicable law. Consent can be refused or changed through the relevant preferences panel. The first-party technical metrics described above are separate from third-party web analytics.
Google and Cloudflare may process technical data under their own notices: Google Privacy Policy and Cloudflare Privacy Policy.
Import, export and backups
You can export one or more cards as .pizzalab files and create .pizzalab-backup backups. These are JSON files that can include text, notes and encoded photos. If you choose to save, send or upload them to an external service, the recipient or service handles them under its own privacy notice.
Imports of .pizzalab, .pizzalab-backup and Masterbiga-compatible CSV files take place locally. On Android and iOS, a file received from another app may be copied temporarily into app storage to complete the import and then removed.
Android may include app data in operating-system backups or device transfers, depending on your device and account settings. This is not an automatic upload of the archive to Pizza Lab servers.
Partner banners and external links
The app may display partner banners configured by the controller. To display one, the app requests its configuration from the Pizza Lab server; if the image is hosted on an external domain, that domain may receive ordinary connection data.
Clicking a banner, Instagram or another external link happens only at your request. Destination pages have their own notices and practices. Pizza Lab does not use advertising SDKs or read the device advertising identifier.
Retention and deletion
Local archive content remains on your device until you delete it from the app or clear app/browser data. Exported files, system backups and shared copies must be managed separately.
Daily technical-statistics counters are retained for 14 months and then deleted. Cumulative counters, which contain no archive content or direct identifiers, may be retained to analyse the overall service trend. Infrastructure-log retention depends on the relevant provider's configuration.
Purposes, providers and security
We process remote technical data to provide, protect, respond to requests about and improve the service. Content created in the app is handled locally at your request. Remote communications use HTTPS.
Cloudflare provides infrastructure and connection protection; Google Analytics 4 may be used only for the web analytics described above. If you share a file through email, cloud storage, messaging or another app, that service acts under its own terms. Some providers may process data outside the European Economic Area under safeguards in their terms and applicable law.
Your rights and policy updates
Where the GDPR applies, you may request access, rectification, erasure, restriction, objection and portability for data processed by the controller. You can also lodge a complaint with the Italian Data Protection Authority or another competent authority. Content stored only on your device can be managed and deleted directly in Pizza Lab or in device settings.
We may update this policy when features, providers or processing change. The date at the top will always show the latest revision.