This policy explains what Native Cook knows about you, why, who else handles it, and what you can ask us to do with it. It applies to the site at nativecook.dev. The short version: we keep the little we need to run your account and your subscription, we run no ads and no analytics, and we never sell data.
Native Cook is run by Ngoc Le, an individual based in Vietnam.
Email: ngocdevv@gmail.com
Payments are handled by Polar Software, Inc. (United States) as the merchant of record.
1. What we collect
Account. Your email address, a display name, which sign-in method you use (email link, GitHub or Google) and when you signed in. If you sign in with GitHub or Google, they send us your email and name; we never see your password for those services. Email sign-in links are sent by our database provider, Supabase, on our behalf.
What you do on the site. The blocks you save. Your choices of theme, platform tab and billing period are kept in your browser only (see section 5).
Pro. Polar, our merchant of record, runs the checkout and keeps your payment details, billing address and any tax ID; we never see your card number. Polar gives us a customer ID and tells us whether your subscription is active, how it is billed and when the current period ends, which we store so the site knows you are Pro. At checkout the site passes your IP address to Polar so it can work out your country for tax. Polar emails you receipts and renewal or failed-payment notices.
Technical records. The companies that host the site keep ordinary server logs (IP address, browser, pages and videos requested) for a short time for security and reliability. Our database provider logs requests to your account for the same reason. We don’t use analytics, advertising or tracking tools.
2. Why we use it
- To run your account, show you the right content and keep your saves: this is needed to provide the service you asked for.
- To sell and renew Pro, issue invoices and handle taxes and refunds: needed for the contract and required by law.
- To keep the site secure, prevent fraud and answer your emails: our legitimate interest in running the site properly.
We only email you about your account and your subscription. We don’t send marketing emails and we don’t sell or rent personal data.
3. Who else handles it
These companies process data for us, each only for the purpose listed:
- Supabase (database and sign-in; data stored in Tokyo, Japan) — privacy policy
- Polar Software, Inc. (merchant of record: checkout, payments, invoices, tax; United States; uses Stripe to process cards) — privacy policy
- GitHub (hosts the site; sign-in provider if you choose it) — privacy statement
- Cloudflare (stores and streams the preview videos) — privacy policy
- Google (sign-in provider if you choose it) — privacy policy
Some of them are outside your country, mainly in Japan and the United States. They commit to safeguards such as standard contractual clauses for that data, and to processing it only on our instructions.
4. How long we keep it
Your account, saves and subscription record stay until you delete your account, which you can do yourself on the account page or by emailing us from the address on the account. Deleting cancels any subscription at once and asks Polar to anonymize your customer record; Polar keeps order and invoice records for as long as tax and accounting law requires. Server logs are kept for short periods and then discarded.
5. Cookies and browser storage
The site sets no cookies of its own and uses no tracking cookies, so it shows no cookie banner. It keeps a few things in your browser’s local storage: your sign-in session, your theme, platform and billing choices, and the page to return to after signing in. Clearing site data in your browser removes them. Polar’s checkout and customer portal pages set their own cookies, covered by Polar’s policy.
6. Your rights
You can ask us for a copy of your data, to correct it, to delete your account, or to object to how we use it. Email ngocdevv@gmail.com from the address on your account; we answer as soon as we can and within the time the law gives us. If you live in the EU or the UK you can also complain to your data-protection authority. Residents of Vietnam have the rights set out in Decree 13/2023/ND-CP on personal data protection.
7. Children
Native Cook is for people aged 18 and over. We don’t knowingly keep data about anyone younger.
8. Security
Everything travels over HTTPS, the database only lets you read your own records, and payment data never touches our systems. No method is perfect; if we learn of a breach that affects you, we will tell you.
9. Changes
When this policy changes we update the date at the top, and for meaningful changes we email account holders. Our terms and refund policy live alongside this page.