Privacy Policy

Last updated: August 24, 2026

This Privacy Policy explains how Bowls Studio ("we", "us", "our") collects, uses, stores, and shares information when you use 100 High-Protein Bowls at 500 Calories (the "Service"). By using the Service, you agree to this policy.

1. Who we are

Bowls Studio operates 100 Bowls, a digital cookbook web application. For privacy-related questions or requests, contact us:

Email: [email protected]

2. Information we collect

We collect only what is needed to run the Service:

• Account email and order reference. We receive the email address and transaction reference of your purchase from Paddle so we can match that purchase to your account.
• Access links and sign-in codes. We generate a personal access link and, when you ask to sign in, a short-lived one-time code. Both are stored on our servers and sent to the email address you paid with.
• Purchase information. If you buy lifetime access, our payment provider Paddle collects your payment details and billing email. We receive your email address and order reference so we can activate your account. We do not store full payment card numbers.
• Session data. After sign-in we issue an HttpOnly session cookie so you stay logged in.
• On-device data. Saved favorites and shopping-list checkmarks are stored in your browser's local storage on your device. We do not upload this data to our servers.
• Technical data. Our hosting provider (Cloudflare) may process standard server logs (IP address, browser type, request time) to deliver and protect the site.

3. How we use your information

We use the information above solely to operate the Service:

• create and maintain your account;
• match a Paddle purchase to your account;
• authenticate you with email access links, one-time codes, and session cookies;
• determine whether you have paid access to the cookbook;
• display your signed-in email in the app interface.

We do not sell your personal information or use it for advertising unrelated to operating the Service.

4. How we use other information

• Provide, secure, and maintain the Service;
• Process purchases and grant access after payment;
• Respond to support requests and handle refund or complaint inquiries;
• Comply with legal obligations and prevent fraud or abuse.

5. Where data is stored

Account records (email, paid status, order reference, access link tokens) are stored in Cloudflare Workers KV, hosted by Cloudflare. Session cookies are stored in your browser. Favorites and shopping-list state remain on your device.

6. How we share information

We do not sell your personal information. We share data only with:

• Paddle.com — our Merchant of Record for payments. Paddle processes transactions and may handle buyer support related to billing. See Paddle's Privacy Policy.
• Cloudflare — hosting, edge functions, and KV storage. See Cloudflare's Privacy Policy.
• Legal requirements — if required by law or to protect rights, safety, and security.

7. Cookies

We use essential cookies only:

• Session cookie — keeps you signed in after you open your access link or enter your sign-in code.

We do not use advertising or third-party tracking cookies.

8. Data retention

We keep your account data while you have an active account or while needed to provide the Service and comply with legal obligations. Pending purchase records (before first sign-in) are kept for up to 180 days. You may request deletion of your account data by emailing us (see Section 10).

9. Your rights

Depending on where you live, you may have rights to access, correct, delete, or restrict processing of your personal data, or to object to certain processing. To exercise these rights, contact us at [email protected].

Your access link is tied to the email address you paid with. Treat it like a password: anyone with that link can open the cookbook. Ask us to reset it and we will issue a new link and invalidate the old one.

If you are in the European Economic Area or UK, you may lodge a complaint with your local data protection authority.

10. Contact

Email: [email protected]

11. Changes

We may update this Privacy Policy from time to time. The "Last updated" date at the top will change when we do. Continued use of the Service after changes means you accept the updated policy.