Privacy Policy

Last updated: May 2026 (rev. 3) · Kopec InnoTech s.r.o.

1. Who we are

MealSpector is operated by Kopec InnoTech s.r.o., Grafická 3365/1, Smíchov, 150 00 Praha 5, Czech Republic (IČO: 21847126). For any privacy-related questions, contact us at contact@kopecinnotech.com.

2. What data we collect

We collect only what is necessary to operate the service:

Email addresses — only if you voluntarily submit them via the newsletter form on the results screen. Providing an email is entirely optional.
Anonymous game scores — when you finish a game, your final score is recorded as a number in a histogram. No name, device, or IP address is stored alongside it.
Usage analytics — if you consent via the cookie banner, we use Google Analytics 4 to understand how people use MealSpector (which categories are popular, how many games are completed, etc.). This data is aggregated and does not identify individual users by name. Google Analytics is not loaded unless you explicitly accept.
Server and infrastructure logs — Cloudflare, which hosts MealSpector, may log standard request data (IP address, browser type, pages visited) for security and performance purposes. These logs are controlled by Cloudflare under their own privacy policy.

3. How we use your data

Email addresses are used solely to send updates about MealSpector (new features, new categories, major changes). We will never sell, rent, or share your email with third parties for marketing purposes.
Anonymous scores are aggregated into a histogram used to calculate percentile rankings shown at the end of each game. No individual score is linked to a person.
Analytics data is used to understand usage patterns and improve the game. We do not use it to build profiles or serve advertising.

4. Legal basis (GDPR)

If you are located in the European Economic Area, we process your data on the following legal bases:

Consent (Art. 6(1)(a)) — for email addresses submitted via the newsletter form, and for Google Analytics (you are asked via the cookie banner on your first visit). You can withdraw consent for analytics at any time by clearing your browser's localStorage or cookies. You can withdraw consent for email by contacting contact@kopecinnotech.com.
Legitimate interest (Art. 6(1)(f)) — for anonymous game scores used to calculate percentile rankings. The scores are not linked to any individual and cannot identify you.

5. Data storage and security

Email addresses and game score data are stored in Cloudflare KV, a serverless key-value store operated by Cloudflare, Inc. Cloudflare operates a global network; data may be stored or processed in data centres outside the EU, though Cloudflare maintains appropriate safeguards under the EU-US Data Privacy Framework and standard contractual clauses.

Retention: Email addresses are kept until you unsubscribe or request deletion. Anonymous game scores are retained indefinitely as aggregate data (they cannot be linked to any individual). Analytics data is processed by Google Analytics and retained for 26 months in accordance with Google's default settings.

Your daily challenge progress and best scores are stored locally in your browser's localStorage and never sent to our servers.

6. Your rights

Under GDPR, you have the right to:

Access the personal data we hold about you
Rectification of inaccurate data
Erasure ("right to be forgotten")
Portability of your data in a machine-readable format
Object to processing based on legitimate interest
Withdraw consent at any time (for email subscriptions)

To exercise any of these rights, email contact@kopecinnotech.com. We will respond within 30 days. Note that anonymous game scores cannot be linked back to you and therefore cannot be individually accessed or deleted.

You also have the right to lodge a complaint with the Czech data protection authority: Úřad pro ochranu osobních údajů (ÚOOÚ), Pplk. Sochora 27, 170 00 Praha 7, www.uoou.cz.

7. Cookies and consent

On your first visit, a cookie consent banner asks whether you accept Google Analytics. If you decline, no analytics cookies are set and Google Analytics is never loaded. If you accept, the GA4 cookies (_ga, _ga_*) are set for up to 2 years. Your choice is stored in your browser's localStorage and respected on every subsequent visit.

MealSpector does not set first-party tracking cookies. For the full list of third-party cookies (Cloudflare, Google Analytics), see our Cookies Policy.

8. Third-party services

Cloudflare Pages — hosts the website and API functions. Privacy policy: cloudflare.com/privacypolicy
Google Analytics — usage analytics. Data is processed in accordance with Google's privacy policy: policies.google.com/privacy
Google Fonts — typography (Nunito). Loading fonts makes a request to Google servers; no personal data is sent by MealSpector. Google Fonts privacy info: developers.google.com/fonts/faq/privacy
Pexels — food photographs are downloaded and served locally from our own servers. No requests are made to Pexels from your browser.

9. Changes to this policy

We may update this policy from time to time. Material changes will be reflected in an updated "Last updated" date at the top of this page. Continued use of MealSpector after changes are posted constitutes acceptance of the revised policy.

10. Contact

contact@kopecinnotech.com
Kopec InnoTech s.r.o.
Grafická 3365/1, Smíchov, 150 00 Praha 5
IČO: 21847126