Privacy Policy
Last updated 31 July 2026
What Sofra collects, why, who else sees it, and how to have it deleted.
Who we are
Sofra & Co is operated by Grey Dog Labs LLC, a Wyoming limited liability company. This policy covers sofradinners.com and the meal plans sold through it. It says what we collect, why, who else sees it, and what you can ask us to do about it.
What we collect
| What | Why |
|---|---|
| Quiz answers | Household size, the night you find hardest, allergies and restrictions, foods nobody at your table will eat, and which description of your weeknights fits. Household size, allergies and no-go foods are attached to your order so the right week is chosen and scaled. The rest tells us which problem people are actually buying a solution to. |
| Email address | To send you the plan, and to send occasional Sofra email. You can leave that list at any time. |
| Payment details | Collected by Stripe on their own page. Card numbers never reach our servers and we never see them. |
| Technical data | IP address, browser type, and which pages you opened. The IP address is used to stop one person hammering our endpoints, and it is held in memory rather than written down. |
We do not collect your name unless you give it to Stripe, and we do not collect your phone number, your location, your contacts, or your photos.
Cookies and what is stored in your browser
Sofra sets two cookies of its own. Three other services set the rest:
- Sofra sets
sofra_gclidwhen you arrive from a Google advertisement. It holds the click identifier Google puts on the link you followed, so a sale can be matched back to the advertisement that caused it. It contains no name, no email address, and nothing you typed. It expires after 90 days. - Sofra sets
sofra_utmwhen you arrive from a link that says where it came from, such as a pin, a post, or a newsletter. It holds only the labels written into that link, for example the wordpinterest, so we can tell which of those places people arrive from. It contains no name, no email address, and nothing you typed. It expires after 90 days. - Google Analytics sets
_gaand_ga_cookies to count visits and tell us which pages lead to a purchase. - Meta sets
_fbpand_fbccookies when we are running advertising, so a sale can be matched back to the advertisement that caused it. - PostHog sets a
ph_cookie, and stores a matching record in your browser using local storage, holding a random identifier. It is what lets us see that one person moved from the quiz to the plan rather than counting the same visit twice. It is described in full below.
Your answers to the quiz are held in your browser using session storage while you complete it, and are cleared when you close the tab or reach the thank-you page. They are never readable by anyone else.
Session recording, and what it does not capture
We use a product-analytics service called PostHog to understand where people get stuck. Alongside counting visits, it records a playback of the pages you visit on this site: what you click, how far you scroll, and how you move through the quiz. We watch these to find the questions that lose people. We use them for nothing else.
Three things are worth stating plainly:
- What you type into a field is hidden before the recording leaves your browser. That includes your email address. The masking happens on your device, so the text is never sent to us or to PostHog.
- Your card details are never captured, and cannot be. Payment happens on Stripe's own website
at
checkout.stripe.com. Recording stops at the edge of this site, so there is nothing for it to see. - You can turn it off. If your browser sends a Global Privacy Control or Do Not Track signal, or you use a content blocker, no recording is made. You may also email jason@greydoglabs.com and ask us to delete any recording connected to your email address.
Advertising, and the hashing that goes with it
When we advertise, we tell the advertising platform that a sale happened so it stops showing the advertisement to people who already bought. To match that sale to a click, we send a SHA-256 hash of your email address, not the address itself. A hash is one way. We also pass your IP address and browser type, which the platform uses for the same matching and then discards.
Who else sees your information
| Service | What they get |
|---|---|
| Stripe | Your email, your payment details, and the household size, allergies and no-go foods attached to the order, so the right plan can be sent. |
| Loops | Your email address and your serving size, in order to deliver the plan and send Sofra email. |
| Google Analytics | Anonymous usage: pages, events, and a random identifier. No email address in readable form. |
| Meta | Only when advertising is running: the hashed email described above, plus the event that happened. |
| PostHog | Which pages and steps you reached, a random identifier, and the session recording described above with your typed input already hidden. Your email address is attached only after you give it to us in the quiz. |
| Vercel | Hosts the site and therefore handles the requests it serves. |
We do not sell your information, and we do not share it with anyone not listed above.
How long we keep it
- Your email stays on our list until you unsubscribe or ask us to delete it.
- Your order is kept by Stripe for as long as tax and accounting rules require.
- Your download link stops working 30 days after it is issued. Ask and we will send a fresh one.
What you can ask for
Whatever country you are in, you can ask us to show you what we hold, correct it, delete it, or stop sending you email. Write to jason@greydoglabs.com from the address you ordered with and we will do it. There is no form and you do not have to give a reason.
If you are in the European Economic Area or the United Kingdom, our basis for handling your information is the contract between us for the plan you bought, and your consent for anything to do with marketing. If you are in California, we do not sell or share personal information as those words are defined by the CCPA, and asking us to delete your information will never change the price you pay.
Children
Sofra is not intended for anyone under 16, and we do not knowingly collect information from them.
Changes
If this policy changes, the date at the top changes with it. Material changes are announced by email to anyone on the list.
Contact
Grey Dog Labs LLC, a Wyoming limited liability company. Write to jason@greydoglabs.com.