Privacy & safety

Your kitchen.
Your business.

What is stored

Your optional profile name, individual or household mode, food preferences, saved kitchen-recipe ingredient selections, meal-plan selections, favorites, pantry selections, reference portions, grocery check marks, daily meal logs, water amounts and notes are stored in this browser's localStorage. They are not sent to an application server. Anyone using this browser profile may access them. Clearing browser data can remove them; export a backup regularly.

No account or cross-device synchronization

There is no login, backend profile database or automatic sharing. Other tabs on the same origin can receive local changes. Different domains, browsers and devices do not share this storage.

Photography and hosting

Recipe photographs are served from this site, so showing them sends nothing to a third-party image service. Turn photography off in Settings to use the bundled recipe illustrations. They are not presented as cooked-dish photographs. Viewed photographs may be cached on your device for offline access, up to 96 images; photographs you have not opened are not downloaded in advance. The hosting provider may keep standard request logs. This site has no analytics or advertising scripts.

Your kitchen photo

Photo recognition is optional and requires explicit consent. Before upload, the browser crops/resizes your photo, redraws it as JPEG to remove metadata, and sends only that image and your optional context note to this site's protected analysis endpoint. The configured provider (Cloudflare Workers AI or OpenAI) is available under Processing details before analysis. The application does not save photo bytes, filenames or raw model observations in localStorage, logs or a database. A short-lived result cache exists only in this open tab. Only food names and recipe matches you explicitly confirm are stored locally. Provider processing and retention policies still apply; this is not a zero-retention guarantee. Cloudflare Turnstile is loaded only after you consent and request analysis; it processes security signals needed to prevent abuse. No other pantry, meal, profile or health information is sent to the model. Cloudflare AI data use · OpenAI API data controls.

Offline storage

A service worker caches site files for offline use. It does not send your kitchen records anywhere. An update is offered before an existing worker is replaced. Offline images can fall back to local illustrations.

Food and health boundaries

Inspect packaging, allergen statements and cross-contact risks. Ingredient filters are not medical advice or a food-safety certification. Portion multipliers are not recommendations for children or people with medical conditions. Recipe timing does not establish safe cooking; use a thermometer and appropriate food-temperature guidance.

Remove your data

Settings provides a confirmed reset of this application's local records. Export first. It never intentionally deletes another app's data. To remove cached site files and downloaded photos as well, clear this site's data in your browser settings.

Separate kitchens on this device

You can create up to 12 separate personal or household profiles. Each has its own pantry, meal plan, preferences and daily records in this browser. These profiles are not accounts, are not password-protected and do not synchronize across devices. Anyone using this browser profile can open them. Export each kitchen separately before clearing browser storage. The in-app reset applies to the currently selected kitchen, not all profiles.

Shareable kitchen-recipe links

A kitchen-recipe link contains the template name and food identifiers needed to reconstruct that recipe. It does not include your profile, pantry quantities, notes or meal history. Share these links only when you are comfortable sharing that ingredient combination.

Optional public-page analytics

This package ships with external analytics disabled. Its optional Cloudflare Web Analytics adapter can measure public-page visits and performance after the site owner configures it. Cookieless does not mean script-free: an enabled adapter loads Cloudflare's JavaScript beacon.

The bundled adapter does not load on Today, Pantry, Weekly Plan, Shopping, Settings or personal cooking pages, or on URLs with queries or fragments. It never sends pantry contents, notes, ingredient exclusions, profile names, photos or local feature counters. It also skips browsers signalling Do Not Track or Global Privacy Control.

Private feature counters stay in the active local kitchen and its backups; they are not site-wide analytics. Browser storage and backups remain under your control. Do not put a private API secret in the public analytics configuration.

Cloudflare's independent automatic-injection setting is outside this adapter. The site owner must disable automatic injection when using these private-page guards.

Cloudflare Web Analytics documentation

Where shall we go?

Use arrow keys to move. Enter to open. Escape to close.