Last updated 11 October 2026.
ملخص بالعربية: لا حسابات، ولا كلمات مرور، ولا مدفوعات، ولا إعلانات، ولا ملفات تعريف ارتباط (كوكيز)، ولا أدوات تتبع. لا نبيع بياناتك ولا نشاركها. يرى مزوّدو الاستضافة عنوان IP كأي موقع. ميزات تحديد الموقع اختيارية ولا تعمل إلا إذا طلبتها. اسم الطفل في شهادة «الطاهي الصغير» يبقى على جهازك ولا يُرسل إلينا. النسخة الإنجليزية أدناه هي النص المعتمد.
fifi.cooking is a free public archive of Dr. Fatma Alkawokgy's recipes. There are no accounts, no passwords, no payments, no ads, no cookies and no analytics or tracking scripts, on the website or in the apps. This policy explains the little that does happen to data when you use the Service.
The Service is run by Ahmed Abdel Aal on behalf of the family of Dr. Fatma Alkawokgy. He is the controller (in Canadian terms, the person accountable for personal information) and the person responsible for privacy, including under Quebec's Law 25. Contact: [email protected].
| Data | When and by whom | Purpose and legal basis |
|---|---|---|
| IP address, browser and request details | Every page load, seen by our hosts GitHub Pages (GitHub, Inc.) and Cloudflare, Inc., as network providers. We do not receive or keep these logs. | Delivering the site and protecting it from abuse. Legitimate interests (GDPR art. 6(1)(f)). |
| IP address | Google Fonts (Google LLC) when a page loads its typefaces. | Displaying text in the right fonts. Legitimate interests. |
| IP address, the video you choose | YouTube (Google LLC): thumbnails load from YouTube when you open a recipe's Videos tab; the player, in YouTube's privacy-enhanced mode, loads only when you press a video. | Showing the videos you ask for. Your request, and legitimate interests. YouTube's own privacy policy applies to the player. |
| Approximate city and country, or coordinates | Only if you use a “near me” feature: ipinfo.io estimates your city from your IP address, or, if you allow your browser's location prompt or type a place, OpenStreetMap Nominatim turns it into a city. The result stays in your browser to build store links. | Finding stores and events near you, at your request. Consent / performing your request; you can refuse the browser prompt. |
| Your language choice | Stored on your own device (browser local storage key fifi.lang, or the app's settings). Never sent to us. | Remembering the language you picked. Strictly necessary for a feature you asked for. |
| A child's name on a “Super Chef” certificate | Drawn into a picture on your device. Never sent to us or anyone else unless you share the picture yourself. | Making the certificate you asked for. |
| Your email address and message | Only if you email us (the feedback and tribute buttons open your own email app). Delivered through our email forwarding provider to the maintainer's mailbox. | Answering you and, for tributes, sharing them with the family if you asked. Legitimate interests / consent. |
| Issues and pull requests | Only if you post on GitHub; public, under GitHub's terms. | Handling reports and contributions. |
| App installs and crash statistics | The app stores (Apple, Google, Amazon, Samsung) may give us aggregated, non-identifying statistics under their own policies. The apps contain no analytics or advertising code of ours. | Keeping the apps working. |
Recipe searches, filters, bookmarks of pages and everything else you do in the archive happen in your browser or app. We do not build profiles, and we never sell or “share” personal information (as those words are used in California law), use it for targeted advertising, or use it to train AI models.
The Service sets no cookies and uses no tracking pixels or fingerprinting. It uses your device's local storage only for your language choice. Third-party services you choose to load (for example the YouTube player) may use their own storage under their own policies. Because we do not track you, we treat Do Not Track and Global Privacy Control signals as already honoured.
Our providers are based in the United States and process data worldwide. Where the GDPR or UK law applies, these providers rely on the EU-U.S. Data Privacy Framework and its UK extension, or on standard contractual clauses, as stated in their own policies. Data handled by us is stored in Canada and the United States.
We keep no visitor logs. Emails are kept only as long as needed to answer them, or longer if you ask us to keep a tribute, and are deleted on request. Providers keep their technical logs for the periods in their own policies.
Depending on where you live, you have rights over your personal information, including to know what we hold, to get a copy, to correct it, to delete it, to withdraw consent, to object or restrict processing, to data portability, and not to be discriminated against for using these rights. These rights come from laws including Canada's PIPEDA and Quebec's Act respecting the protection of personal information in the private sector (Law 25), the EU and UK GDPR, the California Consumer Privacy Act as amended by the CPRA and other U.S. state privacy laws, and Brazil's LGPD. Because we hold almost nothing, most requests are about emails you sent us. To make a request, email [email protected]; we answer within 30 days and may ask you to confirm the request comes from you. You may use an authorised agent where the law allows.
You can also complain to a privacy regulator: the Office of the Privacy Commissioner of Canada, Quebec's Commission d'accès à l'information, your provincial commissioner, your EU data protection authority, the UK ICO, or the California Privacy Protection Agency.
The Service is suitable for families and has a Cooking with Kids section, but it does not collect personal information from children or anyone else: there are no accounts, forms or chat, and the certificate name never leaves the device. We do not knowingly collect personal information from children under 13 (or under the age set by local law, such as 16 in parts of the EU, or 14 in Quebec). If you believe a child has emailed us personal information, write to us and we will delete it.
The site is served only over HTTPS, its code is public for anyone to review, and it holds no personal data to breach. Report security problems as described in our security policy.
We will update this page, with a new date, before any change in what we collect. Every change is public in the repository history.