Privacy policy
Last updated: 2 November 2026
Knafa Bjoz is an educational website about knafeh. We collect as little personal data as we can, we never sell it, and we don’t use advertising trackers.
Who is responsible
The site is run by Lulu Technologies, British Columbia, Canada (“we”). For anything about your data, email privacy@knafabjoz.com.
What we collect, and why
Visiting the site. The site is hosted by Cloudflare. To deliver pages and protect the site from attacks, Cloudflare processes technical data such as your IP address and browser type. We do not store your IP address. To stop abuse of our forms we use a scrambled version of it (a keyed hash that changes every day) for a short time, so it can’t be traced back to you or followed from one day to the next.
Visitor statistics. We use Cloudflare Web Analytics, which counts visits without cookies and without tracking you across sites.
Visit counts. We also keep our own daily counts of visits. When you open a page, we add one to two counts for that day: one by place (your country, region and city, as Cloudflare works them out from your connection) and language, and one by the page, your country, the website that linked to us (for example instagram.com) and whether you’re on a phone, tablet or computer. Your place is never stored together with the pages you read. We don’t store your IP address, a device number, the time or anything else that could identify you. Bots, link previews and browsers that send a “Global Privacy Control” signal aren’t counted.
Product analytics (PostHog). We also use PostHog to understand how the site is used: which pages are read, what is clicked, and the actions counted below. It runs without cookies and stores nothing on your device. Your IP address is thrown away before anything is saved, and we don’t record your screen. To count daily visitors, PostHog works out a temporary code that changes every day, so it can’t identify you or follow you from one day to the next or across other sites. It doesn’t run on email-link pages, and browsers that send a “Global Privacy Control” or “Do Not Track” signal are left out.
Settings kept in your browser. Your colour theme, your language, which polls you answered and your recipe ratings are remembered in your own browser. We also store a random device number there so you can vote or rate once. None of this identifies you, and you can clear it by clearing your browser’s site data.
Polls and ratings. We store your answer or star rating, the language you used, your country (worked out from your connection; never your city or exact location), and a scrambled version of the random device number. We don’t know who you are.
Anonymous usage counts. To learn what readers find useful, we count things like quiz answers and results, recipes saved or cooked in cooking mode, and the settings people choose in our calculators (for example pan sizes). Each count records only what happened, the day, the language and the country. Nothing is linked to you or your device. If your browser sends a “Global Privacy Control” signal, we don’t count anything from it.
Bot check (Cloudflare Turnstile). When you send a form, Cloudflare checks that you are a person. To do this it processes technical signals from your browser and your IP address. See Cloudflare’s privacy policy.
“I made it” entries. When you share a dish, we collect your name, your email address, your note, up to three photos and an optional rating.
- Your name, note, photos and rating are shown on the site once a moderator approves them.
- Your email is never shown. We use it only to send one confirmation link and to handle requests about your entry.
- We remove location and camera details from every photo before storing it.
Email list. If you subscribe, we store your email address, your language, and when and how you agreed. We email you only after you click the confirmation link, and every email has an unsubscribe link.
Why we’re allowed to use it
- Your consent: the email list, and “I made it” entries (you tick a box when you send one). You can withdraw consent at any time.
- Our legitimate interest in running a safe, working site: security, abuse limits, the bot check, anonymous polls and ratings, anonymous usage counts and visit counts.
How long we keep it
| Data | Kept for |
|---|---|
| “I made it” entry not confirmed by email | 7 days, then deleted |
| Rejected entry | 30 days (so a mistake can be undone), then deleted |
| Approved entry | Until you ask us to remove it |
| Email subscription not confirmed | 30 days, then deleted |
| Confirmed subscription | Until you unsubscribe |
| Email links (confirm, delete) | Until used or expired, then deleted |
| Records of moderation actions | As long as the site runs |
| Anonymous votes, ratings, usage counts, visit counts and product analytics | As long as the site runs |
Who else handles it
We use these services to run the site. They process data only on our instructions:
- Cloudflare, Inc. (hosting, database, photo storage, bot check, statistics and confirmation emails).
- PostHog, Inc. (product analytics, without cookies or IP addresses).
Both are based in the United States and may process data outside Canada and outside your country, under their data processing terms.
Your rights
Wherever you live, you can ask us to:
- show you the data we hold about you;
- correct it;
- delete it.
You can also withdraw your consent at any time. If you live in the EU or UK (GDPR), Brazil (LGPD) or Canada (PIPEDA, and British Columbia’s PIPA), you can also complain to your data protection authority.
The quickest way to delete everything linked to your email address is the form below. For anything else, email privacy@knafabjoz.com.
Children
The site is for a general audience. If you are under 16, please don’t send us an “I made it” entry or subscribe without a parent’s permission.
Changes
If we change this policy, we’ll update the date at the top. If a change affects how we use your email address, we’ll ask for your consent again.