Privacy policy

CAKELANKA (cakelanka.com) is a free directory of home bakers in Sri Lanka. You find a baker here and order from them directly, by WhatsApp, Messenger or phone. This page explains what information we keep, why, and what you can ask us to do with it.

What we collect

Browsing the site. You don't need an account to browse. When you tap a baker's WhatsApp, Messenger or call button, or open a baker's page, we record that it happened so the baker can see how many people their page reaches. With it we store the page you came from, your browser type, and a one-way scrambled (hashed) version of your IP address — not the address itself.

Signing in with Google. Google gives us your name, email address, profile photo and a Google account ID. We do not see your Google password or anything else in your Google account.

Signing up with email. Your name, email address and password. The password is stored only in scrambled (hashed) form; nobody at CAKELANKA can read it.

Bakers. The details on a baker's page — business name, area, phone and WhatsApp number, social links, prices, photos and descriptions — are public by design. Many listings were first put together from information the baker had already published on their public Facebook page; bakers can claim their page to edit it, or ask us to correct or remove it.

Things you add. Reviews you write (shown publicly with your name) and bakers you save as favourites.

What we use it for

• To sign you in and keep you signed in.
• To let bakers manage their own page.
• To show bakers simple counts of views and contact taps.
• To keep the site secure and working, and to contact you about your account if we need to.

We do not sell your information, show advertising, or use advertising trackers.

Visitor statistics

To understand how the site is used and fix what's confusing, public pages use Google Analytics (how many people visit, which pages, roughly which country and how they found us) and Microsoft Clarity (heatmaps and anonymised recordings of how pages are scrolled and tapped). Clarity hides anything typed into forms. Neither runs on sign-in, account or dashboard pages. We look only at totals and patterns, never to identify you. You can opt out with your browser's tracking protection or Google's opt-out add-on.

Cookies

Our own cookie, cakelk_session, keeps you signed in and protects forms from misuse. It is deleted when you sign out or close your browser. Google Analytics and Microsoft Clarity set their own cookies (such as _ga and _clck) to count repeat visits; these last up to a year.

Who else sees it

• Hostinger hosts the site and its database.
• Google handles "Continue with Google" sign-in and Google Analytics, under Google's own privacy policy.
• Microsoft runs Clarity, under Microsoft's privacy statement.
• Bakers. When you contact a baker, you go straight to WhatsApp, Messenger or your phone. What you share there is between you and the baker, and those services' own policies apply.
• Anyone, if the law requires us to disclose it.

How long we keep it

Account details are kept while your account exists. Contact-tap records are kept as long as the baker's page exists. Database backups are kept for 14 days and then deleted.

Your choices

You can ask us to show you the information we hold about you, correct it, or delete your account. Bakers can ask us to change or remove their listing at any time. Email contact@cakelanka.com and we'll reply within 14 days. We handle personal data in line with Sri Lanka's Personal Data Protection Act, No. 9 of 2022.

Children

CAKELANKA is not meant for children under 16, and we don't knowingly keep accounts for them.

Changes

If we change this policy we'll update the date at the top of this page. Big changes will also be noted on the site.

See also our terms of use.