Dinner Plan by Escape Plan Software

Privacy notice

Last updated 22 October 2026 · applies to plan.escapeplan.software

This notice covers Dinner Plan. It adds to our company privacy policy; where they differ, this notice applies to Dinner Plan. The data controller is Escape Plan Software Ltd, company number 17262078, Suite 10906, 5 Brayford Square, London E1 0SG, United Kingdom. Contact: hello@escapeplan.software.

Your answers

To build your plan we ask for your country, how many adults and kids eat dinner, your weekly dinner budget, how many dinners you want, diet choices (vegetarian, gluten-free, dairy-free, nut-free), foods to leave out and how long you can cook.

Some of these, like vegetarian or gluten-free, can say something about your beliefs or health, so we keep them out of our records. Your answers are encrypted into your plan link. Our server decrypts them only for the moment it takes to build your plan, and doesn't store them. When you pay, the encrypted reference from your plan link goes to Stripe and Link with your payment so that you get the right plan. They don't decrypt it, but like the link itself it would open your plan preview on our site. We never send your answers or your plan to Meta or any advertiser.

Anonymous counts

We count, as daily totals, how many times pages and quiz steps are viewed, plans are built, checkout is started and payments are completed. Each count holds only the event, the day, the ad code from the link you arrived by (for example "m3"), which offer was shown, and US or UK. It holds no cookie, IP address, device identifier or anything else that could identify you. We use these totals to see which ads and pages work (our legitimate interest in running and improving the service) and keep them for 25 months.

Payments

Your order is sold through Link: Sold through Link, LLC, a Stripe company, is the merchant of record. Link and Stripe collect your card details, name, email address and billing address, work out any sales tax or VAT, and email you receipts; we never see your full card number. Link shares your order details with us, including your name, email address, billing address, what you bought and whether the payment succeeded. We use this to give you your plan, manage your subscription, handle refunds and support, prevent fraud and keep the records the law requires (UK tax and accounting records are kept for six years). Link and Stripe use your data as controllers for their own purposes, such as payments, tax, fraud prevention and your Link account, as described in Stripe's privacy policy for Link. If you ask Link to delete your data, Link also cancels any subscription you bought through it.

To make sure a completed payment is counted once, we keep a one-way hash of the Stripe checkout reference for 35 days. It can't be turned back into the reference.

Cookies and the Meta pixel

By default this site sets no cookies and loads no third-party scripts. Your browser remembers your cookie choice so we don't ask again; that's all it stores.

If we're running ads, we ask whether we can use the Meta pixel. Only if you choose Accept, your browser loads Meta's script, which sets Meta cookies and tells Meta that you visited, viewed your plan preview, started checkout and, if you buy, the amount and currency. When you accept and then buy, our server may also tell Meta about the purchase directly (Meta's Conversions API), including a one-way hash of your email address so Meta can match it to an ad. Meta uses this to measure and improve our ads; we and Meta are joint controllers for collecting and sending it, and Meta's own use is covered by Meta's privacy policy. Our legal basis is your consent. You can change your choice any time with "Cookie settings" at the bottom of each page. If your browser sends a Global Privacy Control signal, we treat it as a Reject.

Hosting

The site runs on Cloudflare, which processes standard technical data such as IP address and browser type to deliver pages and protect the site from abuse, as our processor. We have switched off request logs. Cloudflare tells our server which country a request comes from; we use it only to check that we can sell to you, and don't store it.

Who we share data with

We don't sell personal data. Stripe, Cloudflare and Meta are based in or transfer data to the United States; we rely on the UK Extension to the EU-U.S. Data Privacy Framework or the UK's International Data Transfer Addendum for these transfers.

Your rights

Under UK data protection law you can ask to access, correct or delete your personal data, to restrict or object to how we use it, or to get a copy. You can withdraw consent to the pixel at any time. US residents have similar rights under their state's law, including the right to opt out of "sharing" for advertising; Reject in the cookie choice does this. Email hello@escapeplan.software; we reply within one month. You can complain to the UK Information Commission (ico.org.uk).

Children

Dinner Plan is for adults; you must be 18 or over to buy.

Changes

When we change this notice we update the date at the top. If a change affects how we use your data, we'll say so here before it applies.