Privacy

• The request form asks for your name, how you know us, and, if you choose, an email address for your invite.
• Only admins see requests. Each admin gets an email with your name when one arrives.
• A declined request is deleted. An approved request is kept as a record of who was invited.

• Your display name is public. It appears beside recipes you add.
• Your email address is private. Sign-in codes are sent to it, and admins can see it.
• A sign-in code is stored encrypted until it’s used, or deleted after 30 minutes.
• If you add a passkey, the site stores only its public key, which can’t sign you in on its own. The passkey itself stays on your device or in your password manager.
• Each sign-in starts a session, which records the IP address and browser it began from. A session ends when you sign out, or after 180 days without a visit.
• To slow down guessing, the site briefly counts sign-in attempts from each IP address.

• To read a recipe you import, the site may send its photos or the text of its web page to an AI model through Vercel’s AI Gateway. Neither the Gateway nor the model’s provider keeps them after answering.
• Each request an import makes is labeled with your account id in the AI Gateway’s usage reports, never your name or email address. The model’s provider gets a coded form of that id, so it can trace misuse to an account without knowing who you are.
• An import’s draft is kept until you save it as a recipe, or deleted after 7 days.
• A record of each import is kept: who started it, when, which AI model read it, and what it cost.

• Signing in sets a cookie that keeps you signed in. Adding or using a passkey sets a short-lived cookie for that step.
• The request form and requests for a sign-in code use Vercel BotID, which runs a check in your browser to tell people from automated programs.
• Your choice of light or dark theme is saved in your browser and never sent to the site.

• Email is sent through Resend.
• The site is hosted by Vercel. Its database is hosted by Neon, and photos are stored in Vercel Blob.
• A photo or scan that’s removed, or that belongs to a deleted recipe, is deleted for good after 40 days.
• Imports are read by AI models through Vercel’s AI Gateway.
• Changes are tried on test versions of the site before they go live. Test versions use a copy of the database, so they may hold copies of this data too. They aren’t public.

To ask about your data or have it removed, ask the member who invited you. If you’ve only requested access, ask the person you know here.