Skip to the text
Ciboso

Privacy policy

Last updated: 7 November 2026

This page explains what Ciboso stores about you, why, who handles it, how long it is kept and what you can do. We keep it short and plain.

Who is responsible

Ciboso is run from Belgium by Esosa Enakoya. In this policy, "we" means Esosa Enakoya, who decides why and how your data is used (the controller under the General Data Protection Regulation, GDPR). You can write to us at esosaenakoya@gmail.com.

You can use Ciboso from anywhere in the world. This policy applies to everyone who uses it.

What we store about you

  • Your display name, your "about" text and your profile photo.
  • Your login identifiers: the user id and object id that Microsoft gives your login. Ciboso keeps no password.
  • Your settings: hints and tutorials you have seen, language, motion, contrast, keep screen on, whether you closed the install reminder, which offers to move a bookmark to a newer version you closed, and your recipe filters. They follow your account, so they are saved on our server.
  • Your roles, the groups you belong to and your friends, and the groups you created.
  • The recipes you write, with their photos, and the recipes you last edited.
  • The recipes you bookmark.
  • Which recipes you opened, once for each recipe, with the date of the first time.
  • The date, the time and the version of the terms when you confirmed that you are 16 or older and accept the terms of use.
  • The reports you send about a recipe or one version of it, and the email address you may give with a report. That address is used only for that report and is deleted with it.
  • The recipes and versions you blocked. A report blocks the recipe or version for you only. Nobody else sees your blocks.
  • The reason we give when we hide a recipe or a version by hand. Only its author sees it. If an author hides a version of their own recipe, the people who bookmarked that version keep it.
  • Technical records of your requests. When your phone sends a change, Ciboso keeps a short technical record with the answer it gave, so that a change sent twice is not done twice. It can hold what you changed. It is linked to your account and removed after about 30 days, or sooner when you delete your account. They are removed with the next update of Ciboso, so they can be kept a little longer. It is not in your download; write to us if you want a copy.
  • Technical logs of requests to our server. These hold your IP address, the time and the web address (URL) you asked for, which can include words you searched for.

Ciboso does not ask for your email address and does not store it in your account. Microsoft handles your sign-in and keeps the login details you give it. Microsoft's sign-in codes (tokens) can still contain your name, and your email address if Microsoft adds it. Ciboso holds them encrypted only while you stay signed in. Because we have no email address for you, we usually cannot contact you. The one exception is the optional email address you can give with a report. If you give an email address, I can answer you by hand. Without one, I cannot answer you.

You give us most of this yourself. You need an account to use Ciboso, and it needs these details to work. Your about text, your photo and what you post are up to you.

Why we use it, and on what legal basis

  • To provide Ciboso to you: your account, recipes, shopping bag, groups, settings and signing in. The legal basis is our agreement with you, the terms of use.
  • To keep Ciboso safe and working: limiting how many requests one address can make, finding faults in the logs, and backups. The legal basis is our legitimate interest (a good reason that does not harm your rights) in a safe, working service.
  • To count views and bookmarks of recipes inside the app. The app does not show these numbers now. The legal basis is our legitimate interest in learning which recipes people use. If we start something new with this data, we update this policy first.
  • To handle reports and keep the rules of the terms of use. The legal basis is our legal duty to offer a way to report illegal content, and our legitimate interest in keeping Ciboso free of abuse.
  • To show that you confirmed your age and the terms. The legal basis is our legitimate interest in being able to prove this.
  • To keep recipes after deletion and to prove your confirmation. The legal basis is our legitimate interest in keeping the recipes in Ciboso and in defending ourselves against claims. This stays limited as described under How long we keep it.
  • To work out statistics and suggestions. We plan to use recipes to work out statistics and suggestions that point to no person, such as which ingredients go well together. The legal basis is our legitimate interest in improving Ciboso.

You can object to any use that rests on our legitimate interest; see Your rights. We do not sell your data and do not use it for advertising. No decision about you is made automatically, and we do not use your data to train AI.

Signing in

You sign in with Microsoft Entra External ID. Microsoft shows its own sign-in page. Ciboso receives your Entra user id, never your password. If you change your display name, we also update it at Microsoft.

While you are signed in, the sign-in codes (tokens) from Microsoft are kept with strong encryption (AES-256-GCM) on our server. Your session ends after 14 days without use, and after 90 days at the latest.

Who can see what

  • A recipe is visible only to you until you share it.
  • A recipe shared with a group is visible to the members of that group.
  • A recipe shared with every signed-in person is visible to all of them.
  • People who can see what you share also see your display name and photo next to it. Members of a group can see who else is in it.
  • The person whose recipe you report is not told that it was you.
  • A recipe or version you report is hidden from you only. Everyone else keeps seeing it until we decide.
  • The reason for hiding a recipe or version is seen only by its author.
  • You can hide a version of your own recipe. The people who bookmarked that version keep it.
  • Pages that do not need an account, such as this one, show nothing about you and set no cookies.

Photos

Profile photos, recipe photos and group photos are kept in Azure Blob Storage. Recipe photos are only visible to signed-in people who may see the recipe. Profile photos and group photos can be opened by anyone who has their web address, without signing in. A profile photo you upload now gets a long, random address that cannot be worked out from anything else. A profile photo you uploaded earlier keeps its old address, which is built from your account ID, until you change the photo. The address of a group photo is built from the ID of the group. An address does not expire. Your profile photo is removed when your account is deleted, and then the address stops working. So only use a profile photo you are comfortable with.

Cookies and data on your device

Ciboso uses no analytics service and no advertising or tracking cookies, and puts nothing on your device to follow you. The cookies and the data below are strictly necessary to give you the service you asked for: to keep you signed in, and to let the app work offline. For that reason the law does not require your consent, and Ciboso does not ask for it. Nothing here is used for any other purpose.

The cookies are:

  • A session cookie. It is essential, cannot be read by scripts and is sent only to Ciboso. It ends after 14 days without use, and after 90 days at the latest.
  • Two short cookies during signing in and signing out. They last 5 minutes.

When you sign in, the Microsoft sign-in page may set its own cookies that it needs to sign you in. Microsoft is responsible for those cookies; see Microsoft's privacy information.

So that Ciboso works offline, it keeps data on your device, in offline storage in your browser and the service worker cache: the app files, the recipes, lists and groups you opened, photos of your own and bookmarked recipes, photos of other recipes you opened (up to a limit), your shopping bag, recipe drafts, changes waiting to be sent, and your settings. If you open an invitation or a recipe link before you have an account, the path of that link (it can hold an invite code) is kept on your device for 30 days, also after you sign out. Ciboso may ask your browser to keep this storage so that it is not cleared when space runs low. This data stays on your device and syncs with your account only through Ciboso.

When you sign out, or another account signs in on the same device, the saved lists of the earlier account are removed, and so are the photos kept on the device. Signing out does not remove unsent drafts and changes waiting to be sent, so you do not lose your work. When you delete your account, Ciboso clears its data on that device. If you share this device, clear Ciboso's site data in your browser before someone else uses it. That removes everything.

Where your data is kept and who handles it

  • Hetzner Online GmbH: the server that runs Ciboso, its database and its backups, in Nuremberg, Germany.
  • Microsoft: signing in (Microsoft Entra External ID) and photo storage (Azure Blob Storage, in the West Europe region, in the Netherlands).

These companies handle data for us, only to provide their service, under a data processing agreement. Your recipes, photos and account details are stored in the European Union. Your Microsoft sign-in details are stored in Microsoft's European data centres; the directory for Ciboso is located in Belgium. Microsoft is a global company and may handle limited data outside the EU, for example in the United States. Microsoft then uses the European Commission's standard contractual clauses, which are rules that protect your data there too. Write to us for a copy of the safeguards. Microsoft handles some sign-in data under its own privacy statement. Using Ciboso from outside the EU does not change where your data is kept.

Apart from the companies above and the people you choose to share with, we give your data to others only if the law requires it, for example at the lawful request of an authority, or when we must report a suspected serious crime that threatens someone's life or safety.

How long we keep it

  • Your account data stays until you delete your account. After that, it is removed as described below.
  • When you delete a recipe, nobody can see it any more, also not people who bookmarked it, and its unpublished edit drafts are deleted. We keep it, its earlier versions and its photos stored for as long as Ciboso runs. If it holds personal details about you, you can ask us to remove them; see Your rights.
  • We keep proof of your age and terms confirmation for 5 years after you delete your account, which is the time within which a claim about it can be made, and then delete it with the next update of Ciboso, so it can be kept a little longer. It is linked only to an account number, not to your name.
  • Your signed-in session and its tokens end as described under Signing in.
  • The technical records of requests are removed after about 30 days, or sooner when you delete your account.
  • The server is backed up once a day and we keep the last 7 backups. So data you delete can stay in a backup for about 7 more days, and then it is gone.
  • Request logs with IP addresses are cleared every night. They can stay in a backup for about 7 more days. Other technical logs keep only the most recent lines (about 50 MB for each service) and drop older ones.
  • Reports about recipes are kept for about a year, so we can handle them and show what we did. After that they are removed with the next update of Ciboso, so they can be kept a little longer.
  • What you blocked stays until you unblock it in Account or delete your account.

Deleting your account and downloading your data

You can delete your account and download your data in Account.

  • You can download a copy of your data as one file in JSON format, which other programs can read. It is made when you ask, is not stored afterwards, and you can ask for it a few times per hour. It holds your profile, settings, confirmations, roles, memberships, the groups you own, your recipes and drafts, what you bookmarked and opened, your reports, what you blocked and the reasons we gave for hiding your recipes. Photos are included as links. Write to us if you want the photo files themselves. It does not hold your sign-in tokens or other people's data. Your shopping bag is only on your device, and your email address and sign-in methods are with Microsoft.
  • When you delete your account, your sign-in identity at Microsoft is deleted. Your name, about text, photo, login identifiers, settings and roles are removed.
  • A record with no name, photo or contact details stays. It no longer says who you were, but your account number stays in it.
  • Your unpublished drafts are deleted, with their photos.
  • Your recipes stay after you delete your account, with their versions and photos. They show "Deleted user" instead of your name and photo. Recipes you shared stay visible to the same people, so that they keep what they saved and cooked from. Recipes you never shared stay stored, and nobody can see them. The legal basis is our legitimate interest (a good reason that does not harm your rights) in keeping the recipes in Ciboso. We plan to use recipes to work out statistics and suggestions that point to no person, such as which ingredients go well together. You can object, and you can ask us to remove any recipe that still identifies you; see Your rights.
  • Your bookmarks and the recipes you opened are removed. The bookmark count stored for a recipe goes down by your bookmarks. The number of times recipes were opened stays, without a link to you.
  • What you blocked is removed.
  • The date you confirmed your age and the terms stays as described under How long we keep it. Reports you sent stay for the time described there, linked only to a record without personal details. The text and the email address you gave in them are removed.
  • You stay in your other groups as "Deleted user", with no name and no photo, until someone who may remove members removes you. Your friends group stays for your friends, and you stay in it the same way, with its invite turned off.
  • For each group you own that has other members, Ciboso first asks you to choose a new owner. Groups where nobody else is left are deleted.

Your rights

Under the GDPR you can ask us for:

  • access to your data and a copy of it;
  • correction of data that is wrong;
  • deletion of your data;
  • a limit on how we use your data;
  • your data in a form you can move to another service;
  • a stop to uses that rest on our legitimate interest (objection).

Much of this you can do yourself in Account. For anything else, write to us. Using your rights is free. You can object at any time to any use that rests on our legitimate interest. Write to us and we stop unless we can show a strong reason to continue. Ciboso has no setting for objecting to a use or for limiting how we use your data. Both work by writing to us: I handle your request by hand, for your account, and answer you.

If a recipe, a photo or a report holds personal details about you, write to us and we remove them, unless the law requires or allows us to keep them. This applies whether you wrote the recipe yourself or someone else did. Send the link to the recipe, its version, the date it was created, who created it and your account ID. You find your account ID in Account, in the three-dot menu, so copy it before you delete your account.

You do not need an account to use these rights. If your name or photo appears in someone else's recipe or in a report, write to us.

To protect your data, we may ask you to prove that the request is yours, for example by using your account ID or by signing in. Ciboso has no email address for you, so we may not be able to find your data from an email alone. We answer within one month; if a request is complex we may take up to two more months and will tell you in the first month.

If you think we handle your data wrongly, you can complain to the Belgian data protection authority, the Gegevensbeschermingsautoriteit, Drukpersstraat 35, 1000 Brussels (gegevensbeschermingsautoriteit.be), or to the authority in the EU country where you live.

Age

You must be 16 or older to use Ciboso. When you sign in, you confirm this. We do not check it further, and we delete an account if we learn that its owner is younger than 16.

Changes to this policy

When we change this policy, the date at the top changes. If a change is big, we tell you in Ciboso first.

Contact

Esosa Enakoya, esosaenakoya@gmail.com.

Privacy policy Terms of use Back to Ciboso