- Version and technical review
Publisher and postal address
Merito Media LLC407 Lincoln Rd, Suite 6H
Miami Beach, FL 33139
United States Scope
This policy covers https://www.kitchenpause.com and its es, en, fr, it, de and pt editions. The non-www domain redirects here. Merito Media LLC publishes the site; use Contact or the postal address for questions.
This describes the published technical configuration, not universal legal compliance. Territorial rules and contractual transfer safeguards need independent legal verification. Other processing is covered by the Privacy policy.
Off before permission
Analytics and Maps remain off until allowed. Browsing or closing the panel is not acceptance.
Separate permissions
Allow measurement, the map, both or neither. Accept and reject have equivalent presentation.
Change your mind
Cookie settings stays in the footer. Email and push subscriptions are independent.
Cookies and requested functions
Cookies are returned with relevant server requests. localStorage stays in the browser until an application reads it; account kitchen tools also synchronize their data with KitchenPause. Session and CSRF protection support forms and login. Saved recipes, shopping, planning, pantry, units, cooking progress and theme provide requested functions rather than advertising profiles.
The contact form uses locally served ALTCHA, not an external tracking captcha. No advertising tags, social pixels, proprietary affiliate measurement or email-open pixel were identified in the reviewed sample. Social profiles are external links, not widgets. Email article images can still generate ordinary server requests when your mail client loads them.
Cookie inventory
Production HTTPS response headers confirmed the first two cookies, including HttpOnly attributes. The other rows describe their activation flows; we did not log into real accounts or request notifications. GA4 names follow the configured tag and provider documentation, not an exhaustive observation of every browser. No cookie values are published.
Other storage and browser features
KitchenPause manages the following local keys. localStorage has no automatic expiry: even logically expired records remain until overwritten or site data is cleared. No first-party sessionStorage or IndexedDB use was identified in reviewed code.
External providers and data
Google Analytics receives navigation events, cookie identifiers and connection/device information; IP addresses form part of the connection. Aggregated reports do not establish anonymity. The entire tag is blocked before permission, rather than relying on a cookieless mode.
Maps connects to Google only after map permission on Contact. Google may access its own cookies depending on browser and Google login; exact names and durations have not been verified for every state. The written address and external link remain available without it.
Merito Media LLC manages the site. Google identifies Google Ireland Limited / Google LLC according to territory. Their legal roles and contracts depend on the service and have not been verified here; international processing, including the United States, may occur. This page does not certify transfer destinations or safeguards.
Spice Universe requests Floating UI and Lucide from unpkg.com. These support the requested viewer, not Analytics or Maps, and are not governed by those two switches. No tracking was identified in these libraries; the CDN may log connections. Domains merely permitted by CSP are not listed as active providers. Contractual verification of UNPKG or replacing these requests with own resources remains pending.
Choose, withdraw and delete
Accept all, Reject optional and Cookie settings are available in the initial notice. Optional boxes start unchecked. Closing without saving, scrolling or continuing is not consent. Saving remembers both permission and rejection equally for 180 days on this origin, across all six editions, not other group publications, browsers or devices. Expiry or a changed consent version asks again.
Withdrawing analytics disables future tag operations, attempts to delete accessible _ga and _ga_* cookies on the host and parent domain, then reloads to unload the running tag. Other open tabs receive the storage change. Withdrawing Maps removes the iframe source. Previous requests, provider-held data, HttpOnly and third-party-domain cookies cannot all be erased by this control; use provider and browser controls too.
Blocked storage leaves external options off and shows an error. Without JavaScript those services remain off. Browser data deletion can sign you out, remove local kitchen data and show the notice again. Email unsubscribe and push permission are separate from website cookie settings.
Review limits and updates
The review covers source code, production response cookies and representative contact, newsletter, privacy and public navigation pages, with code and interface preference checks. Private login, push-provider behavior and every Google account, browser or blocker combination are not exhaustively audited. Local development uses a different origin and may differ.
Prior, granular choice is applied operationally to all editions, drawing on European/Spanish guidance without deciding the publisher’s jurisdiction or claiming universal compliance. Changing policy text alone does not authorize new purposes. Significant option changes require a new consent version. Send questions through Contact without cookie values or tokens.