Hush Pantry Quiet, practical food advice

Privacy Policy

Version 2 · Effective 2026-08-24

Who operates this site

Hush Pantry is a trading name of PagePeeker SRL, which operates this storefront and is responsible for its first-party processing.

Registered address: Srl. Carol Knappe 14, Corp B, Apt 35, Sector 1, Bucuresti, Romania.

PagePeeker SRL is established in Romania.

What the storefront collects and how

Cloudflare receives the network information needed to deliver the storefront, including your IP address and user-agent information sent by your browser. Cloudflare may also provide the Worker with a country code associated with the request.

Each storefront page sends a same-origin page-view request to /_c. That request contains:

  • the page path
  • the referring page, if your browser sends one
  • the utm_source campaign value, if one is present in the page address

The Worker adds the time, UTC day, event type, country code when available, and a pseudonymous identifier called sid. It stores this page-view event in the storefront's Cloudflare D1 analytics database.

When you follow a purchase link through /go/, the Worker stores a checkout-link event containing:

  • the selected product slug
  • the time and UTC day
  • the derived sid
  • the referring page, if your browser sends one
  • the utm_source campaign value, if one is present
  • the country code supplied by Cloudflare, when available
  • a technical suppression reason if the route does not proceed to checkout

The sid is derived from your IP address, user-agent, a secret held on the server, and the current UTC date. The Worker hashes those inputs using SHA-256 and keeps a 22-character base64url value. The D1 event does not store your raw IP address or user-agent.

The sid is pseudonymous, not anonymous, because it is derived from personal data. The UTC date changes the result at UTC midnight, so it is not designed to link your activity across days. It is recomputed for requests and is not stored in your browser.

The storefront does not:

  • set cookies
  • use localStorage or other browser storage
  • create customer accounts
  • use advertising pixels or advertising trackers
  • use cross-site profiling
  • sell personal data

The built storefront uses self-hosted fonts and contains no third-party font request. Its only page script is the first-party /_c beacon described above.

Why this information is used and the legal basis

PagePeeker SRL relies on legitimate interests for the storefront's first-party processing. Those interests are:

  • delivering the storefront through Cloudflare
  • measuring page views and referral channels
  • measuring which checkout links are used
  • identifying checkout routes that were technically suppressed
  • attributing a same-day storefront session to a Polar checkout without placing an identifier on your device

The analytics design limits this processing by using a sid that changes daily, storing no raw IP address or user-agent in the D1 event, placing nothing in browser storage, and avoiding advertising profiles.

Who else receives information

Cloudflare hosts the storefront, serves its static files, runs the Worker, and provides the D1 database. Storefront requests and the analytics events described above are processed on Cloudflare infrastructure. You can read Cloudflare's Privacy Policy.

Purchase buttons first use an internal Hush Pantry /go/ route. When checkout is enabled, that route redirects you to Polar and adds the derived sid as a ref value. Checkout takes place on Polar's domain. Polar Software, Inc. acts as merchant of record and authorized reseller, and Polar collects the information needed for the transaction under Polar's Privacy Policy.

Hush Pantry does not receive or process payment-card details through this storefront. Requests concerning information connected to a specific Polar order should be directed to Polar.

How long information is kept

The D1 analytics database is configured for a 30-day retention period. The Worker attempts to delete event rows older than that period when a new analytics event is written.

Deletion is triggered by new analytics traffic rather than by a scheduled job. If the storefront receives no new analytics events, deletion does not run, so an older row can remain until a later event triggers the purge.

The sid itself changes at UTC midnight and is not stored on your device. That daily change limits cross-day linking, but it does not shorten the lifetime of an event row already stored in D1.

Polar controls retention for information it collects on its own service under its own privacy policy. Cloudflare's handling of information on its services is described in Cloudflare's privacy policy.

Your rights

Because PagePeeker SRL is established in Romania, European data-protection rights apply to its processing. Depending on the circumstances, you may ask for access to your personal data, correction, deletion, restriction of processing, or object to processing based on legitimate interests. You may also complain to the competent data-protection supervisory authority.

There are no Hush Pantry customer accounts and no identifier is stored in your browser. The storefront does not store your raw IP address or user-agent in its D1 analytics event. The sid changes daily and is not designed to identify you directly. For most access or deletion requests, PagePeeker SRL may therefore have no reliable way to connect a stored event to the person making the request. We will explain this if it prevents us from acting on a request.

Requests concerning a specific Polar order should go to Polar, the merchant of record, because Polar controls the transaction record.

How to exercise your rights

Email sorin@pagepeeker.com with your privacy request. Describe the request and any relevant storefront interaction without sending payment-card details.

Version

Version: 2