Privacy policy

Last updated 28 October 2026

Food Recalls is operated by TechTrek Solutions (“we”, “us”). This policy explains what personal data we process when you use foodrecalls.mt and related APIs. It is written to match how the product actually works today.

We do not create user accounts. We do not ask for your name, email address, or phone number to browse alerts. We do not sell personal data.

Who is responsible

Controller: TechTrek Solutions, operating Food Recalls at foodrecalls.mt.
Contact: info@techtreksolutions.eu

What we process

1. Browsing the website

Like most sites, our web server (nginx) records standard access logs: IP address, date/time, requested URL, referrer, and browser user-agent. We use these logs to keep the service secure and reliable, and to generate privacy-oriented traffic statistics with GoAccess (IPs anonymised in the report; no cookies; no advertising profile). Logs stay on our hosting server and are rotated under normal system log retention.

Legal basis (EU/Malta GDPR): legitimate interests in operating, securing, and understanding use of a public information service (Art. 6(1)(f)).

2. Optional notifications (Web Push)

If you choose “allow notifications” (usually after adding Food Recalls to your Home Screen), your browser creates a push subscription. We store on our server:

• the push endpoint URL and encryption keys provided by your browser;
• a country tag (currently Malta / MT);
• timestamps for when the subscription was created or updated.

We do not link that subscription to a name, email, or account. We use it only to send alerts about new Malta-relevant recalls. Delivery goes through the push service your browser uses (for example Apple, Google/Firebase, or Mozilla), which has its own privacy terms.

On your device we also keep small localStorage flags (for example whether you dismissed the prompt or already subscribed) so we do not keep asking. Those flags never leave your browser.

Legal basis: consent (Art. 6(1)(a)). You can withdraw consent by disabling notifications for this site in your browser or OS settings; stale subscriptions are removed when the push provider tells us they are gone.

3. Fonts loaded from Google

The site currently loads fonts from Google Fonts. Your browser may contact Google’s servers (which can see your IP address and user-agent) to download those files. We do not use Google Analytics or advertising tags.

4. Images and the image proxy

Some recall images are fetched through our API so they can be shown reliably. That request may appear in our server logs (including the remote image URL). When we fetch an image, the remote host sees our server’s IP address, not yours as the image client in that hop.

5. Public recall content

Product names, hazards, lot codes, official contacts, and similar fields come from RASFF and linked notices. That is public regulatory information we republish; it is not data you submit to us.

What we do not do

• No accounts or login
• No marketing email list collected via this site
• No first-party advertising cookies or client-side trackers
• No sale of personal data

How long we keep data

• Access logs: according to normal server log rotation on our host (typically weeks, not indefinite archives for analytics).
• Push subscriptions: until you unsubscribe / revoke permission, the endpoint becomes invalid, or we shut down notifications.
• GoAccess reports: generated on the server for operators; not published as a public dashboard.

Your rights (GDPR)

If EU/EEA/UK or Maltese data-protection law applies to you, you may have rights to access, rectify, erase, restrict, or object to certain processing, and to withdraw consent for push notifications. Because we do not run accounts, the practical way to stop push processing is to disable notifications for Food Recalls on your device. For other requests, email info@techtreksolutions.eu. You may also lodge a complaint with the Malta Information and Data Protection Commissioner.

Children

Food Recalls is a general public information tool. We do not knowingly collect data from children to create profiles.

Changes

If our practices change (for example self-hosting fonts or adding a feature), we will update this page and the “Last updated” date.

Related

See also our Terms of use, which explain that alert content comes from RASFF and that we are not an official authority.