Privacy notice

This deployment of the Recipes app is operated by this deployment. This page describes what data the app collects, what it does with that data, and how you can access or delete it.

What we collect

• Your username (a public handle visible to other members of your household).
• An Argon2id hash of your password — never the password itself.
• An Argon2id hash of your account-recovery code — same.
• Recipes, ingredients, cooking steps, and step images you author.
• Meal plans and shopping lists you create.
• Capture sessions (cooking-session photos) you submit from a paired device.
• Image files you upload, served only to authorized members of your household.
• Paired-device certificates. Each paired Android device receives a per-device X.509 certificate signed by an on-host certificate authority that lives only on this server. We store cryptographic fingerprints of those certificates (not the certificates themselves) so the server can recognize a returning device, along with the device label you chose at pairing time and the time the device was last seen. Revoking a device from /account/devices marks its certificate as revoked; the server refuses subsequent requests from it. Changing your password or having yourself removed from a household revokes every active paired-device certificate for your account in the same operation.
• Session cookies (HttpOnly, SameSite=Lax) used to keep you logged in.
• Throttling state — your IP address and recent failed-login counts, kept ephemerally to defeat brute force.

What we do not do

• Share data with any third party. No advertising, no analytics, no cloud APIs.
• Use your data for any purpose beyond serving the app to you and your household.
• Retain data after you delete your account — see the data retention section below.

Data retention

Your account data is retained until you delete your account from your account dashboard. Account deletion removes your user row, sessions, paired-device certificates, and any invites or recipe share-links you issued. Household data (recipes, meal plans, shopping lists) is retained if there are still other members in your household; if you were the only member, the household and its data are deleted with your account.

Your rights

You can:

• Access and download all your data via Account → Data → Export all my data.
• Correct or change any of your data using the recipe, meal-plan, and shopping-list editors.
• Delete your account from Account → Danger Zone.

Cookies

The app sets one cookie on your browser: _session. It carries an opaque session identifier (a 32-character hexadecimal string) that the server uses to look up your session in its database. The cookie is HttpOnly (not readable by JavaScript), Secure (sent only over HTTPS), and SameSite=Lax (not sent on most cross-origin requests). The cookie itself contains no personal data; you can delete it from your browser at any time, which logs you out.