Privacy
What Mixkauer does with information about you. It is short because the site collects very little: there is no account, no advertising and nothing sold on.
Last updated: 18 August 20262026-08-18-4
Who is responsible
Mixkauer is run by:
Christopher Kreymborg 28 Hastings Place Hamilton Lake Hamilton 3204 New Zealand
Anything in this policy — a question, a correction, a deletion — goes to hi@mixkauer.com. A person reads it. There is no data protection officer; the site is too small to need one.
What we collect, and why
The combo you post
The words, the note if you write one, and which language you wrote it in. That is the point of the site: once a moderator approves it, it is public. A combo nobody approves stays in the queue where only the moderators see it.
The name you post under
A name you type yourself — or, if you leave it blank, a made-up one your browser picks for you. Nothing checks it and nothing links it to anything else. It is shown next to your combo, so pick something you are happy to see in public.
Your email address
Asked for when you submit, so you can write to us later and withdraw your combo, and so we can reach you about it — a question from moderation, or the news that it went live. It is never published, never shown to other visitors, never used for a newsletter and never passed to anyone else.
Your votes
Which combo you voted on, whether it was up or down, and when. A score has to be everyone's or it is not a score, so a vote is stored with us rather than in your browser. To keep one person from voting twice we give you a random number in a cookie the first time you vote — no name, no address, nothing that says who you are, and set only when you vote, never for reading. Take the vote back and the row is deleted.
That you agreed to this
When you submit we record that you accepted this policy and the terms, which version of each, and when. That record is the only reason we can show the consent was given, which the law requires us to be able to do.
A spam check on the submit form
Your IP address is never written down. It is hashed together with a secret only this deployment holds, which is enough to count how many times one visitor has posted in the last day and not enough to work back to the address. Those rows are deleted after 24 hours. The form is also protected by Cloudflare Turnstile, which does see your address — see below.
What stays in your browser
Your language choice, the name you post under, what you follow, your own submissions and when you last looked at Alerts are stored in your browser and are never sent to us. They are not cookies, they are not readable by anyone else, and clearing your site data removes them.
The one cookie this site sets is the voting one described above, and it is set only if you vote. It holds a random number and lasts a year. It does not follow you to other sites, and there is nothing to follow you with — no advertising cookie, no tracking pixel, no profile.
The lawful basis
Your consent — Art. 6(1)(a) GDPR
For the combo, the name and the email address. You give them so the combo can be published, and you can take that back at any time.
Our legitimate interest — Art. 6(1)(f) GDPR
For the spam check, your votes, the record of your consent and the aggregate traffic counts. The interest is keeping the moderation queue usable, showing a score that is not simply invented, being able to show consent was given, and knowing roughly how many people visit. None of it identifies you. The voting cookie needs no separate permission: it is set only when you ask for something that cannot work without it.
How long we keep it
A combo that was published
For as long as it is on the site. Ask for it down and it goes — see below.
A combo that was rejected
The words and the note are deleted. What stays is a fingerprint: a one-way hash of the ingredients, with no name, no address and nothing readable in it, kept until we remove it ourselves — so that if the same combination is submitted again, it returns to moderation with the earlier rejection on record instead of arriving as if nothing had happened.
Your email address
It is tied to you, not to any single combo, so it stays even if that combo is taken down or deleted. Ask for your data to be erased and it goes too — see below.
The record that you agreed
It is the proof that you agreed, not a detail of any one combo, so it stays even if that combo is taken down or deleted. Ask for your data to be erased and it goes too — see below.
A vote
As long as the combo it is on, or until you take it back — pressing the same arrow again deletes the row. The cookie that carries your voting number lasts a year unless you clear it sooner.
The spam-check hashes
24 hours, then they are deleted automatically.
What is in your browser
Until you clear it. We cannot delete it for you because we cannot see it.
Who else touches it
Cloudflare, Inc. runs almost everything underneath this site: the servers that answer your requests, the database the combos live in, the network in front of both, the Turnstile challenge on the submit form, the traffic counts, and the mail forwarding behind the address above. They process it on our behalf and under contract, and they may do so outside the EU — Cloudflare is certified under the EU–US Data Privacy Framework and covered by the European Commission's standard contractual clauses.
The traffic counts are Cloudflare Web Analytics: no cookie, no device fingerprint, no profile that follows you between sites — page views and referrers, added up.
Nobody else. Your data is not sold, not traded, not handed to an advertising network, and not used to train anything.
What you can ask us to do
See what we hold
A copy of everything about you, and what we do with it. Art. 15 GDPR.
Correct it
Anything wrong, put right. Art. 16 GDPR.
Delete it
Naming a combo is enough to have it taken down, whether it is still in the queue or already live. No account, no form, no reason needed. Art. 17 GDPR.
Restrict or object
Have us hold on to something without using it, or object to a use we base on our legitimate interest. Art. 18 and Art. 21 GDPR.
Take it elsewhere
A machine-readable copy of what you gave us. Art. 20 GDPR.
Change your mind
Withdraw a consent whenever you like. What we did while it stood stays lawful; everything after it stops. Art. 7(3) GDPR.
Complain about us
To the data protection supervisory authority where you live or work. You do not have to talk to us first. Art. 77 GDPR.
How to ask
Write to hi@mixkauer.com and say what you want. There is no form and no account to log into — if you are asking about a combo, naming it is enough. We answer within a month, and sooner if it is a deletion.
When this changes
The version and the date at the top are the whole changelog. If what we do with your data changes, the version changes with it, and a consent you gave points at the version that was on screen when you gave it. Typos do not move the version.