Legal

Privacy Policy

We collect the minimum we need to make Garnish work — and we explain everything below in plain language.

Last updated: May 2, 2026  ·  Effective: May 2, 2026

Contents
  1. Introduction
  2. Information we collect
  3. How we use information
  4. Sharing & third parties
  5. Cookies & tracking
  6. Data retention
  7. Your rights
  8. California (CCPA/CPRA)
  9. EU/UK (GDPR)
  10. Children's privacy
  11. International transfers
  12. Security
  13. Changes to this policy
  14. Contact

1. Introduction

Welcome to Garnish ("Garnish," "we," "us," or "our"). This Privacy Policy explains how we collect, use, share, and protect personal information when you use our website at cookgarnish.com, our mobile and web applications, and any related services (collectively, the "Service").

By using the Service, you agree to the practices described in this policy. If you don't agree, please don't use the Service.

2. Information we collect

Information you give us

Information we collect automatically

Information from third parties

3. How we use information

We use personal information to:

We do not sell your personal information for money. We do use cookies and pixels from Meta, TikTok, Reddit, and Google to measure ad performance and reach new users — under the California CPRA, this can be classified as "sharing" for cross-context behavioral advertising. You can opt out at any time using the Cookie preferences link in our footer.

4. Sharing & third parties

We share personal information only in the following limited circumstances:

Service providers

We use trusted vendors to operate the Service. They process data only on our instructions and under contractual confidentiality obligations.

ProviderPurposeData categories
SupabaseDatabase, authentication, file storageAccount, profile, content
Kit (ConvertKit)Waitlist & email marketingEmail address, name
VercelWeb hostingIP address, request logs
AmazonGrocery cart & checkout (when used)Cart contents, order ID
Google AnalyticsAggregate usage analyticsPseudonymous device & usage data
Meta (Facebook/Instagram) PixelAd measurement & retargetingPage views, conversion events, hashed identifiers
TikTok PixelAd measurement & retargetingPage views, conversion events, hashed identifiers
Reddit PixelAd measurement & retargetingPage views, conversion events, hashed identifiers

The advertising pixels above only load if you accept advertising cookies via our cookie banner. You can change your choice at any time using the Cookie preferences link in our footer.

Legal & safety

We may disclose information if required by law, subpoena, or valid government request, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

Business transfers

If Garnish is involved in a merger, acquisition, or asset sale, your information may be transferred as part of that transaction. We will notify you and provide choices if applicable law requires it.

With your consent

We will share information for any other purpose with your consent.

5. Cookies & tracking

We use cookies and similar technologies for the following purposes:

The first time you visit, we show a cookie banner with two equally prominent options: Accept all or Reject all. Analytics and advertising cookies only load if you choose Accept. You can change your choice anytime via the Cookie preferences link in our footer. You can also block or delete cookies through your browser settings.

6. Data retention

We retain personal information only as long as needed to provide the Service and for the purposes described in this policy. Specifically:

7. Your rights

Depending on where you live, you may have the right to:

To exercise any of these rights, email us at privacy@cookgarnish.com. We will respond within the timeframe required by applicable law (typically 30–45 days). We will not discriminate against you for exercising your rights.

8. California residents (CCPA/CPRA)

If you are a California resident, you have the rights described above plus the right to know what categories of personal information we collect and disclose. In the past 12 months, we have collected the categories of information described in Section 2 for the purposes described in Section 3.

We do not sell or share personal information for cross-context behavioral advertising as those terms are defined under the CPRA. We do not knowingly collect or sell the personal information of minors under 16.

You may designate an authorized agent to make a request on your behalf. To submit a request, email privacy@cookgarnish.com. We will verify your identity before fulfilling the request.

9. EU / UK residents (GDPR)

If you are in the European Economic Area, United Kingdom, or Switzerland, the data controller for your personal information is Garnish. Our legal bases for processing are:

You have the right to lodge a complaint with your local data protection authority.

10. Children's privacy

Garnish is not directed to children under 13 (or under 16 in the EU/UK), and we do not knowingly collect personal information from them. If you believe a child has provided us with personal information, please contact privacy@cookgarnish.com and we will delete it.

11. International data transfers

Garnish is operated from the United States. If you access the Service from outside the US, your information will be transferred to and processed in the US and other jurisdictions where our service providers operate. Where required, we use appropriate safeguards such as the European Commission's Standard Contractual Clauses to protect your data.

12. Security

We use industry-standard technical and organizational measures to protect personal information, including encryption in transit (TLS), encryption at rest, hashed passwords, access controls, and regular security reviews. No system is 100% secure — if you believe your account has been compromised, contact us immediately.

13. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email or through the Service and update the "Last updated" date at the top. Continued use after the effective date means you accept the updated policy.

14. Contact us

Questions, requests, or complaints? We'd love to hear from you.