Privacy Policy

Last updated: 16 August 2026

This policy describes what Kyo's Kitchen actually does with visitor information today. It is written to match the site as it currently works, and it will be updated whenever that changes.

Who operates this site

Kyo's Kitchen is an independent, privately run website about dog food safety and homemade dog treats, published by its individual owner. No company details, registered entity or postal address are published here because none have been provided for publication.

How to reach us

The contact form is the way to reach the site operator about anything on this site, including privacy questions and content corrections. You can also email us at hello@kyosdogbites.com.

What the contact form collects

  • Email address — required, so a reply is possible.
  • Name — optional, and only what you choose to type.
  • Subject category — for example “content correction”.
  • Your message — up to 5,000 characters of plain text.
  • Timestamp — when the message arrived, plus a status flag (new, read or resolved) used to keep track of replies.

We don't ask for postal addresses, phone numbers, dates of birth, pet medical records or file attachments, and the form doesn't accept uploads. Please don't include sensitive personal information in a message. We do not store your IP address with your message; abuse prevention works by counting recent submissions from the same email address rather than by logging network identifiers.

Why we process it

Solely to read and answer what you sent, to act on corrections, and to keep a short record of whether a matter was handled. Contact details are never sold, and they are not used for marketing or newsletters — there is no newsletter.

Where it is stored

Messages are submitted to a server-side handler on this site and stored in a private database table that public visitors cannot read, list, change or delete. Only the signed-in site operator can open the message inbox.

Service providers

  • Lovable — hosting and deployment of this website.
  • Supabase — managed database and file storage used for site content, images and contact messages.

These providers process data on the operator's behalf in order to run the site. No email-delivery provider, advertising network or analytics provider is currently connected.

How long messages are kept

The intention is to delete contact messages within about 12 months of a matter being resolved, unless a message needs to be kept longer for an ongoing issue or a legal requirement. To be accurate: this cleanup is performed manually by the operator from the admin inbox. There is no automatic scheduled deletion job running on the site.

Security

The site is served over HTTPS. The contact table is protected by database-level access rules that give anonymous visitors no access at all, and administrative access requires an authenticated account with an admin role. No security measure is perfect, so please treat the form as ordinary email-grade correspondence.

Your rights

Depending on where you live, you may have the right to ask for a copy of the personal data held about you, to have it corrected, or to have it deleted. You can make any of those requests through the contact form — for contact messages, deletion is straightforward, since all we hold is what you sent.

Cookies, analytics and advertising

As of the date above: no third-party analytics service, advertising network, tracking pixel or non-essential cookie is active on this site, and the public pages set no tracking cookies.

Internal food-search terms

The food search itself still runs in your browser against content loaded with the page. We do, however, record what is searched for, in aggregate, so we can understand what visitors are looking for and find foods we haven't written about yet. For each search we may record: the tidied-up (lower-cased, trimmed) search term, how many results it returned, which suggestion — if any — was opened and its position in the list, the area of the site the search came from (for example the home page, the food directory or the header), and the time of the event.

This search analytics does not intentionally store your name, email address, IP address, an account ID, a visitor or session identifier, a device or browser fingerprint, a user agent, or a referrer — none of those are collected, and the feature introduces no new cookies or browser identifiers. The records cannot be traced back to an individual visitor and are never linked to contact messages. Raw search records are kept for up to 12 months.

Signing in is only relevant to the site operator; those authenticated pages store a session token in the browser, which is strictly necessary for signing in and never used to track visitors.

The layout reserves space for future advertising, but no ad code is loaded and the placements render nothing. If analytics or advertising is ever switched on, this page will name the provider and describe any cookie use before it goes live.

External links

We link to third-party sources such as veterinary and toxicology organisations. Those sites have their own privacy practices, which we don't control.

Changes to this policy

When the site's data practices change, this page is updated and the “last updated” date above changes with it.