Privacy and cookies
Last updated 20 October 2026
1. Who looks after your information
Robert Spencer, trading as Nutrition Magician, is responsible for your information (the "controller"). For anything about your information, email admin@nutrition-magician.com. Our postal address is shown once you have created an account, and on the page where you subscribe, before you pay. You can also email us for it.
2. What we keep
- Your account: your username, first and last name, email address, date of birth, country and, if you choose to give it, your gender. Your password is stored scrambled ("hashed"), so not even we can read it.
- What you add: your recipes and photos, your recipe folder, meal plans, saved plans, shopping lists, the prices you enter and what you spent, and your favourite supermarkets.
- Payments: Stripe handles your card. We keep the references Stripe gives us for your membership, and the dates and amounts of your payments, including any recipes you bought.
- Earnings: your sharing link, who joined through it, your sales, what you have earned and been paid, and the Stripe payment link you give us for paying you.
- Security: when you log in or make important changes, we record the date and time and your internet (IP) address, to protect your account and spot misuse.
- Messages you send us on the site or by email, and our replies.
- If you register interest in professional profiles: your name, email address and what you do.
3. Why we keep it
- To give you the service you've joined for, such as your account, your recipes and plans, payments and your earnings. This is needed for our agreement with you. We use your date of birth to check you're 18 or over.
- To keep the site and your account safe, for example by stopping repeated wrong passwords and spotting fraud. This is in our legitimate interests and yours.
- To meet the law, for example keeping records of payments for tax.
- To email you about professional profiles, only if you have asked us to. You can ask us to stop at any time.
We email you about your account, such as confirming your email address, password resets and changes to your membership or these policies. We don't send marketing emails unless you've asked for them, and we never sell your information.
4. Who else sees it
- Other members see only what you choose to share, such as a recipe you mark as shareable. A recipe you offer for sale shows your username as the seller, and people who follow your sharing link see your username as the person who invited them.
- Stripe takes payments for us and pays out earnings. Stripe keeps your card details under its own privacy policy.
- Our hosting company, IONOS, runs the servers the site and its information are kept on.
- Anthropic: if you import a recipe from a photo or a PDF, the file is sent to Anthropic's service to read the recipe from it. It isn't used for anything else.
The site's lettering and icons are kept on our own server, so loading a page doesn't share your internet address with anyone else.
Some of these companies are based in, or use servers in, the United States. Where your information goes outside the UK, it is protected by the safeguards UK law requires.
5. How long we keep it
- Your account and everything in it, for as long as you're a member. If you cancel, we keep it so it's all there if you come back, unless you ask us to delete it.
- When you ask us to delete your account, we delete it and everything in it. We keep a copy for 30 days in case it was deleted by mistake, then remove your personal details from it too.
- We keep records of payments, sales, earnings and payouts for 6 years, because the law requires it for tax, then delete them.
- Messages are kept for 2 years after they've been marked as dealt with, then deleted.
- Accounts that are never confirmed are deleted after 7 days.
- Records of attempts to log in are deleted after 30 days. In our record of important account events, your internet address is removed after 90 days. Links for confirming your email or resetting your password stop working after a short time and are deleted after 7 days.
6. Cookies
Cookies are small files a website keeps in your browser. We use only these, and no advertising or tracking cookies:
| Cookie | What it's for | How long |
|---|---|---|
| nm_session | Keeps you logged in as you move from page to page and protects the site's forms. If you followed a member's sharing link, it also remembers who invited you, for that visit only. | Until you close your browser or log out |
| nm_remember | Only if you tick "Keep me logged in": keeps you logged in on that device. | 30 days |
7. Your rights
You can ask us for a copy of your information, to correct it, to delete it, to limit how we use it, to object to how we use it, or for a copy you can take elsewhere. Email admin@nutrition-magician.com and we'll reply within a month. Many details you can change yourself, on your account page.
If you're unhappy with how we've handled your information, please tell us first. You can also complain to the Information Commissioner's Office at ico.org.uk.
8. Children
Nutrition Magician is for people aged 18 or over. We don't knowingly keep information about children.
9. Changes to this policy
If we change this policy in a way that matters, we'll email you before the change applies. The date at the top shows when it last changed.