Dansk version

Privacy Policy

Pantry, https://pantryapp.dk · Last updated: 12 October 2026

1. Who we are

Pantry is a web application for keeping track of food and household items in storage, including printable labels and storage locations, shared within a family or household. The service is operated by Leif Neland, Stavkærvej 156, 5220 Odense SØ ("we"), who is the data controller. Contact: leifnel@gmail.com.

2. Information we collect

• Account information: your name, email address, your role in your family, and a hashed password (if you register with a password).
• Content you add: products, batches, labels, storage locations, categories, notes, and the dates items were added or taken. This content is shared with the other members of your family in Pantry.
• Subscription information (Premium): subscription ID, amount, currency, status and dates from PayPal. We never see or store your payment card details.
• Technical information: IP address, browser details and timestamps in server logs, and a session cookie while you are signed in.
• Emails: we send emails to confirm your email address, reset your password and deliver family invitations.

3. Google user data (Sign in with Google)

You can choose to sign in to or register for Pantry with your Google account. This is optional; you can also use an email address and password.

• What we access: only the basic profile scopes openid, email and profile. Through them we receive your name, your email address (and whether Google has verified it) and your unique Google account ID. We do not request or access your Gmail, Google Drive, Calendar, Contacts, or any other Google data.
• How we use it: solely to authenticate you, to create and sign in to your Pantry account, to match you to an invitation sent to your email address, and to display your name in the app. We do not use it for advertising, profiling or any other purpose.
• How we store it: we store your name, email address and Google account ID in our database on servers located in Germany (EU), protected with access controls and encrypted connections. We do not store your Google password and never receive it.
• Sharing: we do not sell, rent or share Google user data with third parties, except with our hosting provider and email delivery provider acting as processors on our behalf, or when required by law.
• Limited Use: Pantry's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data to develop, improve or train generalised AI or machine-learning models, and no humans read your Google user data except with your consent, for security purposes, to comply with law, or for internal operations of the service.
• Revoking access and deletion: you can revoke Pantry's access at any time at myaccount.google.com/permissions. To have your account and the stored Google information deleted, email us at leifnel@gmail.com.

4. Why we process it (legal basis)

• To provide the service, create and run your account, and manage invitations (contract, GDPR Art. 6(1)(b)).
• To keep the service secure and fix problems, e.g. logs and rate limiting (legitimate interest, Art. 6(1)(f)).
• To process payments and meet Danish bookkeeping requirements (Art. 6(1)(b) and (c)).

5. Who we share it with

• Contabo GmbH: hosting of the service and database. All Pantry data is stored on servers in Germany (EU).
• Amazon Web Services (Amazon SES, USA): sending emails. Transfers to the USA rely on the EU Standard Contractual Clauses and/or the EU-U.S. Data Privacy Framework.
• Google: if you use Google sign-in, to authenticate you.
• PayPal: payment processing for Premium subscriptions.
• Content delivery networks: the site loads scripts and styles from jsDelivr, jQuery and DataTables, which may therefore see your IP address and browser details.
• Your family: administrators of your family can see the name, email address and role of the family's members.

We do not sell your personal information.

6. Cookies

We only use a strictly necessary session cookie that keeps you signed in and protects forms against misuse. We do not use analytics, tracking or advertising cookies.

7. How long we keep it

• Account information and content: as long as your account or family exists, or until you ask us to delete it.
• Email confirmation links expire after 24 hours, password reset links after 1 hour and invitations after 7 days.
• Payment records: up to 5 years after the end of the financial year, as required by Danish bookkeeping law.
• Server logs: kept for a short period, for operation and security only.

8. Your rights

You have the right to access, correct and delete your data, to restrict or object to processing, and to data portability. Email leifnel@gmail.com and we will respond within one month. You may also lodge a complaint with the Danish Data Protection Agency (Datatilsynet), datatilsynet.dk.

9. Security

Passwords are stored hashed, connections use HTTPS, and password reset, email confirmation and invitation links are random single-use tokens stored only as hashes.

10. Changes

We may update this policy. The date at the top shows when it was last changed, and we will notify you of material changes.

Terms of Service / Vilkår