Skip to content
Country and language:United States

Privacy policy

Last updated: October 27, 2026

Summary

  • Liorno has no accounts or sign-up. We don't ask for your name, email, phone number or password to use the calculator.
  • The meal you build stays on your device. It is not sent to us.
  • The site has no ads and has no analytics tool. Its only cookie remembers the market (country and language) you pick, and only if you pick one.
  • We only handle personal information if you write to us, by email or through the contact form.
  • We do not sell your personal information and we do not share it for targeted (cross-context behavioral) advertising.

Who is responsible

The person responsible is Daniel Gil, an individual (not a company), at Rua Doutor Falcão Lucas, lote 20, 6300-366 Guarda, Portugal. Contact: contact@liorno.com or the contact form.

The responsible person is based in Portugal, so the European Union's General Data Protection Regulation (GDPR) applies to the handling of data. A data protection officer is not required (Article 37 GDPR): Liorno does no large-scale processing and handles no special categories of data.

What stays on your device

To work, Liorno uses your own browser's storage (localStorage) and a service worker, which keeps a copy of the site's files on your device. If you pick a market, the site also sets a cookie with that choice.

What Why When it goes away
The meal you're editing, and a summary of it So you don't lose it when you close the page When you clear it or clear your browser data
Saved meals To reopen meals later When you delete them or clear your browser data
Theme you chose (automatic, light or dark) To remember your choice When you go back to “automatic” or clear your browser data
The liorno_mercado cookie, with the market you picked (for example, en-us) To take you to the country and language you picked when you open liorno.com After 1 year, or when you clear your browser's cookies. Picking another market replaces the value
A note that the install prompt was dismissed or postponed Not to ask again right away After 14 days if it was postponed, or when you clear your browser data
Site files in cache (service worker) To open faster and work without a connection When you uninstall the app or clear your browser data

Except for the market cookie, explained below, this data never leaves your device and we have no access to it. The name you give a meal also stays there.

Liorno has four markets (Brazil, the United States, Germany and France), each in its own language.

  • The liorno_mercado cookie: when you pick a market in the selector at the top of the page or in the list on the liorno.com home page, the site saves a cookie with that market's code (for example, en-us). The cookie holds no identifier and has no other purpose. It is Liorno's own cookie (not a third-party one), lasts 1 year and is only sent over a secure connection (HTTPS). Your browser sends it to the site with each request, but it is only read when you open the liorno.com home page, to take you straight to the market you picked. If you never pick a market, no cookie is set.
  • With no saved choice: if you open the home page without having picked a market, CloudFront chooses one from your browser's preferred language, which the browser sends with each request. If the language is not enough, it uses the approximate country that CloudFront works out from your IP address at the moment of the request. None of this is stored or logged. This redirect only happens on the home page, and you can switch markets at any time in the selector.
  • Legal basis (EU): our legitimate interest in showing the site in the right country and language and in remembering the choice you made (Article 6(1)(f) GDPR). In the EU this cookie needs no consent, because it only stores a choice you asked the site to remember (Article 5(3) of the ePrivacy Directive 2002/58/EC).
  • How to remove it: delete the cookies for liorno.com in your browser settings. To switch markets, just pick another one.

When you copy a meal's link, the foods and amounts travel in the fragment of the address, the part after the # sign. Your browser does not send the fragment to the server, and nothing about the meal is stored on a server. Anyone who gets the link can see the meal. The address may show up in the browser history and in messages from whoever sent it. Don't put anything personal in a meal's name if you plan to share it.

What we don't do

We don't sell data. We don't ask for personal information to use the calculator. We don't build health profiles, we don't record what you eat, and we have no way of knowing who you are from your use of the calculator. We don't knowingly collect personal information from children.

Hosting and technical access data

The site is hosted by Amazon Web Services EMEA SARL, 38 avenue John F. Kennedy, L-1855 Luxembourg. The files are stored in the European Union (Ireland, eu-west-1) and delivered through the CloudFront network, which has points of presence in many countries, including the United States.

Liorno keeps no access logs: CloudFront access logging is turned off and the site keeps no list of visits. To deliver each page, CloudFront has to process technical data sent by your browser, such as your IP address and request headers, at the moment of the request. AWS does this as our service provider (a processor under the GDPR). Legal basis under the GDPR: our legitimate interest in delivering the site securely and reliably (Article 6(1)(f)).

When this processing happens outside the European Union, the AWS data processing terms apply. They are part of the AWS service terms and include the standard contractual clauses approved by the European Commission. For the United States, AWS also states that Amazon participates in the EU-US Data Privacy Framework.

Audience measurement, ads and cookies

  • The site uses no analytics tool.
  • The site shows no ads and loads no advertising or measurement cookies. Its only cookie is the market cookie, which needs no consent, so there is no cookie banner.
  • No third-party scripts follow your visit.
  • Do Not Track and Global Privacy Control: we don't track you over time or across other sites, so there is nothing for these signals to turn off. The site works the same way whether or not your browser sends them.

If this ever changes, we will update this policy before the change and ask for consent where the law requires it.

Messages you send us

You can write to contact@liorno.com or use the site's contact form.

  • Data: through the form, your name (optional), your email and your message. By email, your address and the content of the message. Please don't include health details or other sensitive information: we don't need them to reply.
  • Purpose: to reply to your message and, where relevant, fix the site. We don't use your message for anything else, and we don't add you to any mailing list.
  • Who receives it: only Daniel Gil, plus the service providers that carry and store the email, listed below. We don't sell or rent it to anyone.
  • Legal basis (EU): our legitimate interest in reading and replying to people who get in touch on their own initiative (Article 6(1)(f) GDPR). You can object at any time by asking us to delete the conversation.
  • How the message travels: the form uses an AWS function (Lambda) that sends the message as an email through Amazon SES, in the European Union (Ireland). Nothing is stored at AWS. The function's technical log keeps only a request ID, the site version and whether sending worked, and is deleted after 14 days. The message arrives in a Zoho Mail mailbox (Zoho Corporation B.V., the Netherlands) in Zoho's European Union data center. AWS and Zoho act as processors. Companies in the Zoho group outside the EU may have access, for example for technical support; Zoho states that these transfers are covered by agreements based on the EU standard contractual clauses.
  • Retention: we delete the conversation 12 months after the last message exchanged. We keep it longer only if it is needed to establish or defend a legal claim in a specific case, and only for as long as that lasts.

US state privacy laws

Several US states have consumer privacy laws, such as the California Consumer Privacy Act (CCPA). These laws generally apply to for-profit businesses above certain size or data thresholds, or to businesses that sell personal data. Liorno is a free, non-commercial site run by one individual, does not sell or share personal data, and handles only the few messages people choose to send. Based on that, we don't believe these laws currently apply to Liorno. We still honor the requests below for anyone, wherever you live.

Your rights and how to make a request

You can ask us:

  • whether we hold personal information about you, and for a copy of it;
  • to correct it;
  • to delete it;
  • under the GDPR, also to restrict its use, to object to it, or to receive it in a portable format.

How: write to contact@liorno.com or use the contact form. To make sure the request is yours, we reply to the email address the messages came from; we don't ask for ID documents.

When: we reply within 30 days. If a request is complex we may need more time; we will tell you within those 30 days, and we will not take longer than 45 days in total.

If we say no: we explain why. You can ask us to reconsider by replying to that email with the word “appeal”. We answer within 30 days. If you are still not satisfied, you can contact your state's attorney general or, in the EU, a data protection authority.

We will not treat you differently for exercising these rights. Because the meal stays on your device, there is normally nothing for us to delete: you can clear it in Liorno or clear your browser data.

You can also complain to a data protection authority. Because the responsible person is established in Portugal, the lead authority is the Comissão Nacional de Proteção de Dados (CNPD, Av. D. Carlos I, 134, 1º, 1200-651 Lisbon, Portugal, www.cnpd.pt). If you live in another EU country you can also complain to the authority there.

Children

Liorno is not directed to children under 13 and does not knowingly collect information from anyone beyond the messages you choose to send. If you believe a child has sent us personal information, write to us and we will delete it.

Changes to this policy

If we change something important, we update the date at the top and, when needed, tell you on the site. The date at the top is the date this version took effect.