The Monthly Soup
Last updated: 4 March 2026
Welcome to The Monthly Soup("we", "us", "our"). We are committed toprotecting your personal data and respecting your privacy. This Privacy Policyexplains how we collect, use, store, and protect your information when you useour website at themonthlysoup.com and our services.
The Monthly Soup is operated byThe Monthly Soup, a company registered in France. For the purposes of theGeneral Data Protection Regulation (GDPR), we are the data controller.
• Account information: Email address, first name, date of birth
• Profile information: Your chosen vegetable avatar
• Content: Answers to newsletter questions, photos, images, and links you share
• Payment information: Processed securely by Stripe (we donot store card details)
• Usage data: When you log in, pages visited, features used
• Device information: Browser type, operating system
• Cookies: Essential session cookies to keep you logged in
We use your personal data forthe following purposes:
• To provide and maintain our Service
• To create and deliver your monthly newsletters
• To process your subscription payments
• To send you service-related communications
• To respond to your requests and support inquiries
• To improve and develop our Service
Under the GDPR, we process yourpersonal data based on the following legal grounds:
• Contract: To provide the service you signed up for
• Consent: For marketing communications (where applicable)
• Legitimate Interest: To improve our service andensure security
Members of your newslettergroups ("Soups") can see your first name, vegetable avatar, and thecontent you contribute (answers, photos, links).
We use trusted third-partyservices to operate our platform:
• Supabase: Database and authentication (EU-hosted)
• Stripe: Payment processing (PCI-DSS compliant)
• Webflow: Website hosting
We do not sell your personaldata to third parties.
Under the GDPR, you have thefollowing rights:
• Right to Access: Request a copy of your personaldata
• Right to Rectification: Correct inaccurate orincomplete data
• Right to Erasure: Request deletion of yourpersonal data
• Right to Data Portability: Receive your data in aportable format
• Right to Withdraw Consent: Withdraw consent at anytime
• Right to Object: Object to processing based onlegitimate interest
To exercise these rights, go toSettings > Privacy in your dashboard, or contact us atmargot@themonthlysoup.com.
We retain your personal datafor as long as your account is active or as needed to provide you with ourservices.
• Active accounts: Data kept while your accountremains active
• Deleted accounts: Data permanently deleted within30 days
• Legal requirements: Some data may be retainedlonger if required by law
We implement appropriatetechnical and organizational measures to protect your personal data, including:
• Encryption of data in transit (HTTPS/TLS)
• Secure authentication with password hashing
• Row-level security on database access
• Regular security reviews and updates
We use essential cookies tokeep you logged in and maintain your session. These cookies are necessary forthe Service to function and cannot be disabled.
We do not use advertising ortracking cookies.
Our Service is available tousers aged 13 and older. Users between 13 and 18 must have parental consent. Wedo not knowingly collect personal data from children under 13. If you believewe have collected data from a child under 13, please contact us immediately.
Your data is primarily storedwithin the European Union. If data is transferred outside the EU, we ensureappropriate safeguards are in place, such as Standard Contractual Clauses.
We may update this PrivacyPolicy from time to time. If we make material changes, we will notify you byemail or by posting a notice on our website. The "Last updated" dateat the top of this policy indicates when it was last revised.
If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us:
The Monthly Soup
Email: margot@themonthlysoup.com
Website: themonthlysoup.com
Country: France
If you are not satisfied withour response to your privacy concerns, you have the right to lodge a complaintwith your local data protection authority. In France, this is the CommissionNationale de l'Informatique et des Libertés (CNIL).