Privacy Policy
Effective June 18, 2026
This policy explains how ScrollToCook (“we”, “us”) processes information when you visit scrolltocook.com (the “Site”), and the choices you have. We deliberately keep data collection to a minimum: the Site has no user accounts, no logins, and no sign-up.
1. Who we are (Data Controller)
The Site is operated by KOLM Michał Kołnierzak, ul. Milenijna 43/2, 03-130 Warsaw, Poland (Tax ID: PL5361929091), which is the data controller for personal data processed through the Site. You can reach us at [email protected].
2. What data we process
- Server and request logs. Our hosting provider automatically records standard technical data (IP address, browser/device type, pages requested, timestamps) to deliver the Site and protect it against abuse.
- Analytics. We may use privacy-respecting, aggregate analytics to see which content is useful. This does not identify you individually.
- Email. If you contact us, we receive the email address and the message you send, and use them only to respond.
We do not require an account, we do not build advertising profiles, and we do not sell personal data.
3. Why we process it, and our legal basis
- To run and secure the Site — our legitimate interest (Art. 6(1)(f) GDPR).
- Analytics — your consent where required, otherwise our legitimate interest in aggregate, non-identifying statistics.
- Responding to your emails — our legitimate interest in answering you, or steps taken at your request.
4. Embedded Instagram content
Articles embed public posts using Instagram's official embed widget, served by Meta Platforms. When an embed loads, your browser connects to Instagram's servers, which may set their own cookies and process your data under Instagram's privacy policy. We do not control that processing and we do not receive your Instagram account data.
5. Cookies
The Site itself uses only the cookies needed to function. Third-party embeds (above) may set additional cookies when they load. You can control or block cookies through your browser settings.
6. Who we share data with
We share data only with providers that help us run the Site, acting on our instructions — for example our hosting/CDN provider and, if used, an analytics provider. We do not sell or rent personal data to anyone.
7. International data transfers
Some providers may process data outside your country. Where that happens, we rely on appropriate safeguards (such as the European Commission's Standard Contractual Clauses).
8. How long we keep data
Server logs are kept only for a short period for security and diagnostics. Emails you send us are kept for as long as needed to handle your request and then deleted.
9. Your rights
Depending on where you live, you may have the right to access, correct, delete, restrict, or object to our processing of your personal data, and to data portability. To exercise any of these, email [email protected].
10. How to request deletion of your data
You can ask us to delete personal data we hold about you at any time. Email [email protected] with the subject “Data deletion”, and we will delete the data we hold (such as your email correspondence) without undue delay, unless we are legally required to keep it.
11. Children
The Site is not directed at children, and we do not knowingly collect personal data from children. If you believe a child has provided us data, contact us and we will delete it.
12. Data security
We use HTTPS and rely on reputable providers with industry-standard safeguards to protect data against unauthorised access, loss, or misuse.
13. Changes to this policy
We may update this policy from time to time. Material changes will be reflected by a new effective date above.
14. Contact and complaints
Questions or requests? Email [email protected]. If you are in the EU/EEA and believe we have handled your data unlawfully, you also have the right to lodge a complaint with your local data protection authority — in Poland, the President of the Personal Data Protection Office (UODO).