Privacy

Last updated 7 September 2026.

Contributing to Nom Nom DB does not require an account. Guest suggestions and corrections enter a private moderation queue and are never published automatically. Contributor registration is currently closed; the Contributor accounts section below describes what an account stores, for anyone who already has one or if registration reopens.

Contributor accounts

An account stores your name, your email address, and a hashed password. Submissions made while signed in are linked to the account so you can see their status; reviewers see your name and a standing score derived from how many of your submissions have been approved, which affects review order. The score is computed from submission counts; no additional profile data is stored.

Confirming a moment while signed in stores the link between your account and that moment, an optional note naming the release or platform you watched, and a timestamp; reviewers see these confirmations as a trust signal, and retracting one deletes the record.

We never store the raw IP address of anyone, account holder or guest: only the one-way keyed hash described below, pruned on the schedule below. To delete your account and its personal information, send a private correction for this Privacy page from the account email address, include an optional contact email if different, and we will remove the account and unlink its submissions.

What a contribution stores

We store the suggestion text and moderation outcome. An optional contact email is used only if clarification is needed, is encrypted at rest, and is never shown publicly. A display name appears publicly only when credit was requested and approved.

For abuse prevention, we store a one-way keyed hash derived from the submitting IP address. The application never retains the raw IP address.

Pressing the recipe-request button on a dish stores only the dish and the same kind of one-way keyed IP hash, used to keep the count honest. The hash is removed after 90 days; the anonymous count remains.

Searches that return no results store only the normalised query text and a count of how often it has been searched. No identifying information is kept.

Every search query is counted the same way (anonymised normalised text with no identifying data) so we can see which dishes and shows visitors look up most and improve the catalogue.

Retention

Encrypted contact details and the keyed IP hash are removed 90 days after resolution. While a record is pending, contact details may remain until it is resolved. For rejected or duplicate records, personal data is minimised while the non-personal suggestion, outcome, and necessary audit relationship may remain.

Search counters (both the no-result log and the general popularity count described above) are anonymous from the moment they are written, and each is deleted automatically once it has not been searched again for 90 days.

Questions and rights

To ask about personal information connected to your contribution, or to request an appropriate correction or removal, send a private correction for this Privacy page and include an optional contact email so we can reply. We will assess each request under the laws that apply; this page does not promise an outcome that the law does not require.