Privacy Policy

Last updated 14 September 2026

Who is responsible for your data

PantryDo is run by Vitor Margis, an individual, who is the data controller for the purposes of the General Data Protection Regulation (GDPR). There is no company behind it and no data protection officer; requests and questions come to one person, at vitor.margis@gmail.com.

What is collected

Your account

• Your name and email address. Given when you sign up, or received from Google if you sign in with Google.
• Your profile picture, if you sign in with Google and Google provides one.
• Your password, hashed. If you set one, it is stored only as a bcrypt hash. The password itself is never written down and cannot be read back out — not by anyone, including Vitor Margis.
• Sign-in records: which method you signed in with, when your email was verified, and unexpired sign-in links. A magic link stops working 24 hours after it is sent.

What you put in PantryDo

• Your pantries: their names, descriptions and expiry-warning settings.
• Your stock: item names, categories, storage locations, quantities and units, low-stock thresholds, expiry dates, icons and any notes you write.
• Your shopping lists: entries, quantities, notes and whether each is checked off.
• Who shares what: which accounts can reach which pantry, who owns each one, and the invite link currently in circulation for it.

None of this is examined, mined or used for anything other than showing it back to you and to the people you share a pantry with.

Technical data

• Server logs, kept by the hosting provider: your IP address, the browser you used and which page was requested. These exist to keep the site running and to investigate abuse.
• Aggregate page views, counted by Vercel Analytics — and only if you allowed it when asked. It sets no cookie, does not follow you between sites, and produces counts rather than records about you. Refuse, and the script is never loaded at all.

What is never collected

No advertising or cross-site tracking of any kind. No location data. No payment details — PantryDo is free and has no payment processor. No access to your contacts, camera, files or anything else on your device. Nothing is sold or rented to anyone, and nothing is shared with data brokers.

Why, and on what legal basis

Withdrawing consent is as easy as giving it, and withdrawing it does not disturb anything that was lawfully counted beforehand. There is no marketing list and no marketing email. The only emails PantryDo sends are the sign-in link you asked for and, rarely, a notice about the service itself — a change to these documents, or the service shutting down.

Who else can see it

The people you share a pantry with. A pantry has one owner and any number of people they invited. Everyone on a pantry sees everything in it — every item, every note, every list entry — and can change or delete any of it. They also see the name and email address of everyone else on that pantry, so that you know whose hands are in your fridge. Inviting someone is therefore a decision about your data: the invite link works for whoever holds it, so treat it like a key.

Leaving a pantry, or being removed from one, ends your access to it immediately. Anything you added while you were there stays with the pantry — it belongs to the pantry, not to the account that typed it in.

The companies that keep the service running. They process data on PantryDo’s instructions and for no purpose of their own:

Beyond those, data is disclosed only if the law requires it, and only as far as it requires.

Where it is stored

The database and the site are hosted on infrastructure that may process data outside the European Economic Area, including in the United States. Where that happens, the transfer relies on the European Commission’s Standard Contractual Clauses or on an adequacy decision, such as the EU–US Data Privacy Framework, depending on the provider. Their own privacy pages, linked above, set out the arrangements each of them operates under.

How long it is kept

• Your account and your pantries are kept for as long as the account exists. There is no automatic expiry — an untouched pantry stays exactly as you left it.
• Deleted items and cleared list entries are marked deleted rather than erased, so that a list you clear keeps its history and an accidental deletion can be undone. They stop being visible immediately, and go for good when the pantry or the account does.
• Deleting a pantry removes it outright, along with everything in it, its shopping list, its membership records and its invite link. It goes for everyone it was shared with, and it cannot be undone.
• Sign-in links expire after 24 hours. Session cookies expire on their own and are dropped when you sign out.
• Server logs are kept by the hosting provider for a limited period, in the order of weeks, under their own retention policy.

Your rights

Under the GDPR you have the right to:

• Know and get a copy of the data held about you (Art. 15), in a portable, machine-readable form (Art. 20).
• Correct anything inaccurate (Art. 16). Most of it you can edit yourself, inside the app.
• Have it erased (Art. 17) — your account and everything in it.
• Restrict or object to processing based on legitimate interests (Art. 18 and 21).
• Withdraw consent where processing rests on it, without affecting what was done beforehand.

You can delete any pantry you own from Settings at any time, which erases its contents for good. To delete your whole account, or to ask for a copy of everything held about you, email vitor.margis@gmail.com from the address you signed up with. Requests are answered within one month, as the GDPR requires, and there is no charge.

One limit worth stating plainly: deleting your account cannot remove a pantry that other people are still using and that you do not own. What you added to someone else’s pantry stays with that pantry. If you want it gone, take it out before you go, or ask the owner.

If you think your data has been handled badly, you are entitled to complain to a data protection authority — you can go to the one in the EU country where you live or work, or where you think the problem happened. Raising it at vitor.margis@gmail.com first is welcome but never required.

How it is protected

• Everything travels over HTTPS.
• Passwords are stored only as bcrypt hashes, never in a form that can be read back.
• The session cookie is httpOnly and SameSite=Lax, so a script on another site cannot read it or ride on it.
• Every request for pantry data is checked against who you are: an identifier for a pantry you cannot reach is answered as if it did not exist, rather than as a refusal.
• Database credentials are held on the server only and are never sent to the browser.

No service can promise perfect security, and this one does not. If a breach ever affects your data and is likely to put you at risk, you will be told about it, and the supervisory authority will be notified within 72 hours as Art. 33 requires.

Children

PantryDo is not intended for children under 16, and accounts are not knowingly created for them. If you believe a child has an account here, email vitor.margis@gmail.com and it will be removed.

Changes to this policy

This page changes when the app does. The date at the top says when it last did. If a change materially affects how your data is handled, you will be told by email or in the app before it takes effect, rather than left to notice a new date.

Getting in touch

Anything at all about this policy, or about your data: vitor.margis@gmail.com.