Privacy policy

Last updated: 11 October 2026

Freshkorb ("we", "us") compares weekly supermarket offers and builds shopping lists. This page explains which personal data we process, why, and what rights you have under the GDPR.

1. Who is responsible

E-mail: [email protected]

2. What we process

Without an account

When you open the website, our server processes your IP address, the requested page and the time in short-lived technical logs. This is needed to deliver the page and keep it secure (Art. 6(1)(f) GDPR). The landing page loads the Inter font from Google Fonts, which transmits your IP address to Google.

With an account

Sign-in data – your e-mail address and, if you sign in with Google, your name and profile image. Sign-in is handled by our authentication provider Clerk (see section 4).
Your settings – language, household size, diet, budget, foods to avoid, loyalty programmes, the supermarkets you follow and your home postcode.
Your content – shopping lists, price watches, imported recipes, and share links you create.

We use this data to provide the service you asked for: showing offers near you, calculating your cheapest basket and sending notifications you turn on (Art. 6(1)(b) GDPR).

Cookies

We use one strictly necessary session cookie to keep you signed in. We use no advertising or tracking cookies and no analytics.

3. Optional list matching with an AI model

If enabled, the text of your shopping-list items is sent to an external language-model provider to remove wrong product matches. No account details are sent. If the provider does not answer, matching falls back to our local matcher.

4. Recipients and processors

Clerk, Inc. – authentication and user management. Data may be transferred to the USA under the EU Standard Contractual Clauses.
Google – only if you choose "Sign in with Google", and for the Inter web font.
Hosting provider – runs our servers: [hosting provider].

We do not sell your data and do not share it for advertising.

5. Retention

We keep your account data until you delete your account. Server logs are deleted after a short period. Share links stay valid until you revoke them.

6. Your rights

You have the right to access, rectify, erase and restrict processing of your data, to data portability, and to object to processing based on legitimate interests (Art. 15–21 GDPR). You can withdraw consent at any time. Write to the address above and we will answer within one month.

You may also complain to a data-protection authority, for example the one in your federal state or the Berlin Commissioner for Data Protection and Freedom of Information.

7. Changes

We will update this page when the service changes and show the date at the top.