Privacy Policy - Cooking Data

Last Updated: July 3, 2025

Welcome to Cooking Data! I'm Lior Barak, a private individual and solo creator passionate about data. I want to be completely transparent about how I handle your personal information when you subscribe to Cooking Data.

Information We Collect

Through Substack and our surveys, we collect:

• Email addresses

• Survey responses (role, region, preferences)

• Payment information (processed by Stripe for paid subscriptions)

• Newsletter interaction data (through Substack)

• Publication visits and views (through Google Analytics)

Legal Basis for Data Collection (GDPR)

We process your data based on:

• Consent (for marketing communications and surveys)

• Contract fulfillment (for paid subscriptions)

• Legitimate interests (for analytics and service improvement)

How We Use Your Information

Your information helps me:

• Send you newsletters and content

• Process your subscription payments

• Understand what content you find valuable

• Improve Cooking Data's offerings

• Analyze general audience engagement

Google Analytics

To understand how readers find and interact with my publication, I use Google Analytics. To better protect your privacy, I have configured these settings:

• IP Anonymization: I have enabled a feature that anonymizes your IP address. This means your full IP address is never stored on Google's servers.

• Data Retention: I have set Google Analytics to automatically delete user-level data (like how you navigate the site) after 14 months and aggregated event data (like page clicks) after 2 months.

• Consent Signals: As you can see from the settings I've shared, I do not automatically mark your data as "consented" for advertising purposes within Google's systems. The advertising and analytics consent signals are inactive, meaning data is not used for ad personalization or behavioral modeling without a proper consent mechanism.

• Opting Out: You can prevent your data from being used by Google Analytics by installing the Google Analytics Opt-out Browser Add-on, which is available here: https://tools.google.com/dlpage/gaoptout."

Platforms We Use

This section centralizes information about the third-party services you rely on.

To run Cooking Data, I rely on a few key services. As I am based in Germany, I am committed to ensuring that any data shared with these platforms is handled securely.

Cooking Data operates through:

• Substack: This is the primary platform for writing and sending my newsletters, managing subscriptions, and hosting this publication. Substack acts as a data processor on my behalf.

• Microsoft Forms and Docs: I use it to collect feedback from you, create quizzes for content, and create more interactive exercises

• Stripe: When you purchase a paid subscription, your payment is processed by Stripe. I do not see or store your credit card details; I only see the status of your subscription.

• Survey platform (for occasional feedback collection)

• Google Analytics: I use this service to understand website traffic and improve my content, as detailed in the Google Analytics section.

These services are based in the United States. To ensure your data is protected to a standard comparable to the EU's GDPR, data transfers are conducted under established legal mechanisms. Substack, Stripe, Microsoft, and Google all adhere to the EU-U.S. Data Privacy Framework, which provides a lawful basis for transferring personal data."

Data Security

As a solo creator, I take your privacy seriously:

• Any locally stored data is anonymized

• All personal data is managed through secure platforms (Substack and Stripe)

• Survey responses are stored securely and anonymized where possible

• I only access the necessary information to provide services

• Google Analytics data is anonymized and complies with GDPR requirements

Your Data Rights (GDPR)

You have the right to:

• Access your data

• Correct your data

• Request deletion

• Object to processing

• Download your data

• Withdraw consent

To exercise these rights, email: cookingdata@substack.com with '[privacy concern]' in the subject line

Data Retention

• Newsletter subscription data: Until you unsubscribe

• Survey responses: Maximum 12 months

• Payment information: As required by law

• Engagement data: Managed by Substack

• Analytics data: 26 months (Google Analytics default)

Cookies and Tracking

• Substack uses cookies for platform functionality

• Google Analytics uses cookies for website analytics

• You can opt out of analytics tracking

• For details, see Substack's cookie policy

• You can manage cookie preferences in your browser

A Note on Substack's Platform Cookies

When you visit my publication's site, Substack will ask you to consent to their use of cookies. These cookies are necessary for the Substack platform to function correctly, for example, to know if you are logged in or to manage your subscription.

This consent is requested and managed directly by Substack as the technology provider. I do not have control over these essential platform cookies. My Privacy Policy specifically covers my use of your data for my newsletters and my analytics (Google Analytics). For more information on Substack's data practices, please refer to their Privacy Policy.

Paid Subscriptions

For paid subscriptions:

• Payments are processed securely through Stripe

• I only see the subscription status and email

• Financial data is handled entirely by Stripe

Changes to Privacy Policy

• I'll notify you of significant changes via email

• Continued use after changes means you accept the updated policy

• Previous versions available upon request

Contact

For any privacy concerns or questions:

• Email: cookingdata@substack.com

• Use [privacy concern] in your title

• Response time: Within 48 business hours

Survey Data

When participating in surveys:

• Participation is voluntary

• Responses may be anonymous

• Data is stored maximum of 12 months

• Used for improving services and content creation

• Anonymized responses may be shared in posts and content

• You can request deletion anytime

This policy was last updated to reflect the addition of reader surveys, Google Analytics tracking, and paid subscriptions. I'm committed to protecting your privacy while delivering valuable content to help you on your data journey.

Note: This privacy policy applies to how I handle information as the creator of Cooking Data. For information about how Substack handles your data, please refer to Substack's privacy policy. For Google Analytics data processing, please see Google's privacy policy.