隐私政策

Short version: we don't track you.

• No tracking cookies. The site runs no advertising or tracking scripts, and share buttons are plain links. Only if you sign in, two cookies keep you signed in on that browser: one holds a random key to your session (scripts cannot read it), the other only says "signed in" so the page shows your photo top right. Signing out removes both.
• Visit counts come from Cloudflare Web Analytics, which counts page views without cookies and without following you across sites.
• Your choices stay on your device. The theme, units and recipe builder drafts are saved in your browser only; we never receive them. Clearing your browser data removes them.
• Nutrition label photos you send to the recipe builder are read once to fill in the numbers and are not stored. We keep only a daily count per connection (as a one-way code, not your address) to apply fair-use limits.
• Recipes you share with the community: we keep the recipe, the name you chose (or "Anonymous") and, only if you give it, your email to tell you when it is published; the email is deleted after that. We don't store your IP address.
• Your account needs only your email, which we use to send your sign-in links and nothing else. Your name, photo, country and diet are optional; they become public only on your cook page, once we publish a recipe you shared. A passkey stays on your device: we keep only its public half. For your safety we log each sign-in and change with the device and the city or country it came from (never the IP address), and you see that list on your account page. You can download everything we hold or delete your account there at any time; deleting removes it all, and recipes already published stay without your name. Our nightly backup copies drop it within about 35 days.
• The same account on plantbased.directory. Our directory signs you in with this account: no second email or password, and the directory keeps no copy of your details, only its own sign-in cookie. What you send there (a suggested place, a correction, a claim) is kept with your account, shown in your activity here, and once we approve a suggestion your name (if you set one) shows on that listing as the person who suggested it. Points for what we approve on either site have no money value. Deleting your account removes all of it, and takes your name off the listings.
• Price photos you send on Add prices: your browser shrinks the photo and removes its hidden details (camera, GPS) before sending; it sends the date taken and, only if the photo has it, the location as two plain values. Google's Gemini and Cloudflare's AI read the prices from it. Before anything is kept, personal details on a receipt (card numbers, names, codes, signatures) are blacked out and people on a shelf photo are blurred; the original is never stored. We keep the redacted photo for good, to check prices, and never make it public: only the prices a person on our team approves are shown. The location is used once to find the shop and city, then dropped. Your email is kept to know who sent each price and to send the one confirmation link; it is never shown or shared.
• Email: if you write to us, we keep your message to answer it and never sell or share it.

Questions: contact us. Updated 12 October 2026.