Privacy Policy

recipemoon is operated by its owner, an individual, who is responsible for the data described in this policy. This policy does not depend on where the owner lives: the law that protects you and the rights you have depend on where you are, and each region is described below.

For any question or request about your data, write to [email protected].

The data protection law that applies to you depends on where you are when you visit the site:

• European Economic Area: the EU General Data Protection Regulation (GDPR) and the cookie rules of your country.
• United Kingdom: the UK GDPR together with the Data Protection Act 2018, and, for cookies and similar technologies, the Privacy and Electronic Communications (EC Directive) Regulations 2003.
• Switzerland: the Swiss Federal Act on Data Protection, revised and in force since 1 September 2023 (see the FDPIC).
• United States:the privacy laws of some states; see “Visitors in the United States” below.
• Elsewhere: the data protection and privacy law of your own country.

Technical data. When you load a page, the web server and its reverse proxy receive your IP address, the address of the page requested, the date and time, your browser and device type (user agent) and, if your browser sends it, the page that linked to us. These server logs are rotated automatically and kept only as long as needed for security and troubleshooting. The application itself logs error messages (for example a failed request to TMDB); these do not contain visitor data.

Preferences stored in your browser.Your light/dark theme choice is saved in your browser's localStorage. If the ad-blocker message is enabled and you dismiss it, that choice is saved the same way. This data stays on your device; we do not receive it. See the cookies page for the exact entries.

Emails you send us. If you write to us, we receive your email address and the content of your message.

No visitor accounts.Visitors cannot create an account, post comments or fill in forms on this site. The only account is the one of the site owner, for the administration area; it holds the owner's email address, optional name and a hashed password, and no visitor data.

Under the GDPR that applies where you are (the EU GDPR in the EEA, the UK GDPR in the United Kingdom) and the Swiss Federal Act on Data Protection in Switzerland, we rely on the following bases:

• Running and securing the site (server logs): our legitimate interest in providing the website, preventing abuse and fixing technical problems.
• Remembering your theme or message choice (browser storage): it is needed to provide the setting you chose; it is not used to track you.
• Answering your emails: our legitimate interest in replying to you and, when you ask us something, taking the steps you request.
• Audience measurement (Google Analytics) and advertising (Google AdSense): your consent, where the law requires it. In the EEA, the United Kingdom and Switzerland these Google services start with storage and personalisation switched off until you choose in Google's consent message. Elsewhere they start enabled, and you can opt out as described below.

We do not use your data for automated decisions that have legal effects on you, and we do not use emails you send us for advertising.

This site sets no cookie for visitors. The only cookie it sets is the administration session cookie of the site owner, after signing in to the admin area. Google Analytics and Google AdSense, which load only on the content pages (home, movie, TV show, person and trending pages), may set cookies or use similar technologies according to your consent choices. The legal pages, the search page and the admin area load no Google script.

The full list, with names, purposes and durations, is on the cookies page.

TMDB. Titles, people, ratings, posters and photos come from TMDB. Our server asks the TMDB API for the data; your IP address is not sent in those requests. Images, however, are loaded by your browser directly from TMDB's image servers (image.tmdb.org), so TMDB receives your IP address, browser type and the page address, as with any image hosted elsewhere. See the TMDB privacy policy. This website uses TMDB and the TMDB APIs but is not endorsed, certified, or otherwise approved by TMDB.

YouTube. Trailers are embedded from youtube-nocookie.com, YouTube's privacy-enhanced embed mode, and only after you click the Trailer button; nothing is requested from YouTube before that. YouTube states that in this mode views of the embedded video are not used to personalise your YouTube browsing or the ads you see elsewhere (YouTube help). Links labelled “Open on YouTube” simply take you to YouTube. See the Google Privacy Policy.

Google Analytics, Google AdSense and Google's consent message. On the content pages we may use Google Analytics to understand aggregate use of the site and Google AdSense to show ads. Your browser sends Google the address of the page and your IP address, and Google may set or read cookies; Google explains this in How Google uses information from sites or apps that use our services.

Third-party vendors, including Google, use cookies to serve ads based on a user's prior visits to this website or other websites. Google's use of advertising cookies enables it and its partners to serve ads to you based on your visit to this site and/or other sites on the Internet. Other third-party vendors and ad networks may also serve ads on this site.

You can opt out of personalised advertising:

• with Google, in Ads Settings or My Ad Center;
• with participating third-party vendors, at aboutads.info;
• through the consent controls described next.

EEA, United Kingdom and Switzerland.Google's consent message lets you accept, refuse or fine-tune analytics and advertising. You can change your mind at any time with the “Manage consent” link in the footer of the content pages; it appears only where Google's consent message is available and applies to you.

Visitors in the United States can find their options in the section of that name below.

Everywhere. You can block or delete cookies and clear localStorage in your browser settings, or use an ad blocker. The site works without them; your theme choice is then simply not remembered.

European Economic Area. The EU GDPR gives you rights of access, rectification, erasure, restriction, portability and objection (Articles 15 to 21 of the GDPR), the right to withdraw consent at any time, and the right to complain to a supervisory authority, in particular in the Member State where you live or work (Article 77). The national authorities are listed by the European Data Protection Board.

United Kingdom. Under the UK GDPR you have the right to be informed about how your data is used, to access it, to have it corrected or erased, to restrict or object to its use, to receive it in a portable format, to withdraw consent at any time, and rights related to automated decision making and profiling (see the ICO guide to individual rights). You can complain to the ICO.

Switzerland. The Swiss Federal Act on Data Protection gives you comparable rights of information, access, correction, deletion and objection, and you can turn to the FDPIC.

Elsewhere. You have the rights that the law of your country gives you, and you can complain to its data protection authority.

Complaints. Wherever you live, you can complain to the data protection authority of the country where you live; the links above are examples for each region.

How to exercise your rights. Write to [email protected] and say which right you want to use. We may need to confirm that the request concerns you, and we will answer within the time required by the law that applies to you. Because visitors have no accounts and we keep no profile of visitors, the data we can look up is limited to emails you sent us and server logs; data held by Google or TMDB must be requested from them.

We do not sell personal information in exchange for money. However, personalised advertising through Google may be considered a “sale” or “sharing” of personal information, or targeted advertising, under the privacy laws of some US states.

If you are in one of those states, you can opt out through the “Do Not Sell or Share My Personal Information” link shown by Google's US state regulations message, where that message is active for your state (Google help), and with Google's ad personalisation controls in Ads Settings or My Ad Center. This site does not add its own opt-out link; the one you see is Google's. For other requests, write to [email protected].

• Server logs: rotated automatically and kept only as long as needed for security and troubleshooting.
• Emails: as long as needed to handle your request.
• Administration session cookie: 2 hours; it is set only for the site owner.
• Theme and message choices: in your browser until you clear them.
• Data held by Google and TMDB: according to their own policies.

Wherever you are, information about your visit may be processed in the United States and in other countries by the providers this site uses (Google, including YouTube, and TMDB). This policy makes no statement about where the owner of the site is located.

Google. Google states that it complies with the EU-U.S. and Swiss-U.S. Data Privacy Frameworks, including the UK Extension to the EU-U.S. Data Privacy Framework, for personal information from the EEA, Switzerland and the United Kingdom, and that it relies on standard contractual clauses where required and where a transfer is not covered by an adequacy decision (Google: data transfer frameworks).

Google advertising and analytics. For these products Google states that it relies on the EU-U.S. Data Privacy Framework to transfer EEA personal information to the United States, that in certain circumstances it relies on the Swiss-U.S. Data Privacy Framework and on the UK Extension for transfers from Switzerland and the United Kingdom, and that it may rely on standard contractual clauses for certain transfers (Google: advertising and analytics data transfers).

TMDB. TMDB describes its own safeguards in its privacy policy.

recipemoon is not directed to children under 13, and we do not knowingly collect personal information from them. The age at which a child can consent to an online service on their own depends on the country: in the EU, for example, each Member State sets it between 13 and 16 (Article 8 of the GDPR). If you believe a child has sent us personal information, write to [email protected] and we will delete it.

We update this policy when the site or the services it uses change. The date at the top of the page shows the last update: October 9, 2026.

Questions about this policy: [email protected].