Privacy Policy for the DoggoMeal Website
This privacy policy explains how personal data is processed when you use the DoggoMeal website and browser-based DoggoMeal features.
It applies in particular to doggomeal.de, public information pages, login and registration pages, browser-based account features, the Android account deletion page and the legal pages. The separate privacy policies for iOS and Android additionally apply to the native apps.
Convenience translation. This English version is provided for your convenience only. The German version at doggomeal.de/datenschutz is the legally binding one; in case of any discrepancy, the German version prevails.
1. Controller
The controller within the meaning of the GDPR is DoggoMeal – Kim Marques, Ziegelstraße 10, 34121 Kassel, Germany.
Contact: support@doggomeal.de. The full provider details can be found in our legal notice at doggomeal.de/en/impressum.
2. Hosting, delivery and server log data
The DoggoMeal website is delivered via Vercel. We use Supabase for authentication, database, storage and parts of the API processing. When you access the website, technically necessary server and security data are processed, in particular the IP address, date and time, requested content, referrer, browser type, operating system and status information.
This processing is necessary to provide the website securely, reliably and with good performance, to analyse errors and to prevent abuse.
- Legal basis: Art. 6(1)(f) GDPR.
- Legitimate interest: the secure, resilient and economical provision of DoggoMeal.
3. Cookies, session cookies and similar storage
We currently do not use any marketing or retargeting cookies on the website. Only technically necessary cookies or comparable browser storage are used.
These include in particular session cookies for login and account features, the storage of your cookie decision and local browser storage for selected convenience features in browser-based DoggoMeal areas.
If you accept optional convenience cookies, we may store app download and partner attribution, e.g. the source, campaign or partner code of a store click. These cookies are not used for retargeting and are not set for third-party advertising networks.
- Technically necessary login/session cookies: in particular Supabase auth cookies such as
sb-*for secure session management. - Cookie consent storage: your choice is stored in the cookie
dm_cookie_preferences_v1and additionally in local browser storage. - Optional app/partner attribution: after consent,
dm_growth_sourceanddm_growth_attributionmay be set to make campaign and partner clicks traceable for up to 30 days. - Local browser storage: browser-based features may cache e.g. chat drafts, unread states or display preferences locally on your device.
- Legal bases: Section 25(2) of the German Telecommunications Digital Services Data Protection Act (TDDDG) for technically necessary storage and access, and Art. 6(1)(f) GDPR for the subsequent processing.
4. Partner enquiries, Food Check and reach measurement
If you use the Food Check (“Futter-Check”), partner pages, app download links or the partner enquiry form, we process the information you enter as well as technical usage data, e.g. page, campaign, partner code, referrer, browser information and a truncated hash of the IP address.
We use this data to answer enquiries, evaluate partner funnels, prevent abuse and develop DoggoMeal further as a business. The Food Check does not replace a veterinary diagnosis or nutritional advice.
- Legal bases: Art. 6(1)(b) GDPR for partner enquiries and Art. 6(1)(f) GDPR for reach measurement, security and funnel evaluation.
5. Reach measurement with Vercel Web Analytics
To understand which pages are read and how visitors find DoggoMeal, we use Vercel Web Analytics. The service works without cookies and without identifiers that work across devices or websites. A visit is only recognised via a hash derived from the respective request, which is discarded after 24 hours. We only see aggregated statistics and cannot identify anyone from them.
For each page view, the following is recorded: time, page visited, referring page (referrer), campaign details from utm parameters, approximate location (country, region, city), operating system, browser and device type. Before sending, we remove all other parameters from the address, replace invitation codes, usernames and message IDs in the path with placeholders and do not count login, internal or system areas at all.
In addition, we count page views ourselves to see how the website is used in each language (German, English, Thai) and country. For each page view we store: time, page visited (with the same placeholders as above), language of the page, country (derived from the IP address; we do not store the IP address itself for this), device type (mobile device or computer), the name of the referring website and a daily identifier. The daily identifier is a hash of the IP address, browser identifier and date with a secret key. It changes every day, cannot be reversed and is only used to count visitors per day. If you change the language using the language switcher, we also store the original and the new language. We set no cookies for this either; we delete the entries after 14 months at the latest. An objection (below) applies to both measurements.
You can object to the measurement at any time. The choice applies to this browser:
- Legal basis: Art. 6(1)(f) GDPR. Our legitimate interest is designing and developing the website according to need.
- Your device: we set no cookies and store no identifiers on your device for the measurement. Only if you object do we store this locally at your request under
dm_analytics_off(Section 25(2) no. 2 TDDDG). - Provider: Vercel Inc. as processor, see section 8.
6. Registration, login and browser-based account features
When you register, log in or use browser-based account features, we process in particular your e-mail address, authentication data, session information and the profile, dog profile and community data belonging to your account.
This concerns in particular login, registration confirmation, profile data, deletion requests, support cases and further browser-based features, insofar as they are offered on the website.
Providing an e-mail address and login credentials is necessary to create and use a DoggoMeal account; without them, no account can be provided. Dog profile details (including the dog’s weight, age, activity level, allergies and intolerances) are voluntary but are required for the recipe and portion calculation. These details relate to the animal and are not health data of a natural person within the meaning of Art. 9 GDPR.
- Legal basis: Art. 6(1)(b) GDPR.
7. Uploads, communication and support
If you upload content via browser-based DoggoMeal features or contact us, we process the data you provide, e.g. profile details, images, messages and e-mail content.
Transactional e-mails and support communication may be processed via our mail infrastructure, Resend and internal support and mailbox systems, insofar as this is necessary for communication, verification, support handling or follow-up.
- Legal bases: Art. 6(1)(b) GDPR for contract-related communication and Art. 6(1)(f) GDPR for general support, security and record-keeping.
8. Recipients and processors
Data processing agreements pursuant to Art. 28 GDPR are in place with the service providers listed below. On request at support@doggomeal.de, we will provide a copy of the safeguards used for third-country transfers.
- Vercel Inc. – hosting, delivery and reach measurement (Vercel Web Analytics, section 5); compute region Frankfurt (EU). Company headquarters in the USA; insofar as processing takes place in the USA, it is based on EU standard contractual clauses.
- Supabase Inc. – authentication, database, storage and realtime. Processing in the region configured for the project; insofar as processing takes place outside the EU or EEA, it is based on EU standard contractual clauses.
- Resend – sending of transactional e-mails; processing in the USA on the basis of the EU-US Data Privacy Framework and supplementary standard contractual clauses.
- Google Workspace (Google LLC) – support and mailbox infrastructure for e-mail correspondence; processing in the USA on the basis of the EU-US Data Privacy Framework, under which Google is certified.
- Note: push notifications (Firebase Cloud Messaging, Apple Push Notification Service) take place exclusively in the native apps. DoggoMeal no longer offers subscriptions, free trials or purchases, including on the website. How we handle data on subscriptions taken out earlier through the Apple App Store or Google Play is set out in the privacy policies for iOS (doggomeal.de/en/datenschutz-app) and Android (doggomeal.de/en/datenschutz-android).
9. Retention periods
- We store server, security and API logs only for as long as necessary for stability, security and abuse prevention.
- Session cookies generally remain stored until you log out, the session expires or you delete them in your browser.
- Cookie consent and local convenience storage remain until withdrawn, deleted in your browser or technically renewed. Optional app/partner attribution cookies expire after 30 days at the latest.
- For reach measurement, the visitor hash is discarded after 24 hours; only aggregated statistics remain. An objection remains stored locally until you withdraw it or clear your browser storage.
- Account-related data is additionally subject to the retention periods of the respective DoggoMeal account. After account deletion, a minimised deletion record may be kept for up to 12 months; billing-relevant data may generally be kept for up to 10 years, transaction or e-mail related records for up to 6 years and legal or consent records for up to 3 years.
10. Your rights
To exercise your rights or if you have questions about data protection, you can contact us at support@doggomeal.de.
The supervisory authority responsible for us is the Hessian Commissioner for Data Protection and Freedom of Information (Der Hessische Beauftragte für Datenschutz und Informationsfreiheit, HBDI), Postfach 3163, 65021 Wiesbaden, Germany. You may also contact the supervisory authority of your habitual place of residence.
- the right of access (Art. 15 GDPR),
- the right to rectification (Art. 16 GDPR),
- the right to erasure (Art. 17 GDPR),
- the right to restriction of processing (Art. 18 GDPR),
- the right to data portability (Art. 20 GDPR),
- the right to object to processing based on Art. 6(1)(f) GDPR (Art. 21 GDPR),
- the right to withdraw consent with effect for the future (Art. 7(3) GDPR); the lawfulness of processing carried out before the withdrawal remains unaffected,
- the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR).
11. No automated decision-making
There is no automated decision-making producing legal effects or similarly significant effects within the meaning of Art. 22 GDPR. The recipe and portion calculation is a deterministic calculation based on your dog profile details (e.g. weight, age, activity level) and does not replace veterinary advice.
12. Changes
We update this privacy policy when features, the services used or legal requirements change. The current version is available at any time at doggomeal.de/datenschutz (German, binding) and doggomeal.de/en/datenschutz (English translation).
