Privacy

Last updated October 31, 2026

This is a small site run by one person. This page says in plain words what it keeps about you. It is not legal advice.

If you only browse

Recipes and blog posts are open to everyone. There is no sign-in, no advertising and no tracking script. Our hosting provider, Cloudflare, sees the usual technical details of a visit (such as your IP address) in order to deliver the site and keep it safe.

If you make an account

You must be 13 or older. We keep:

• Your email address and your name (the name is optional), so you can sign in and so we can email you.
• Your password, only as a scrambled value that cannot be turned back into the password. We cannot read it.
• When you joined and last signed in, and a sign-in cookie that keeps you signed in on this device.
• What you send us: the dishes or genres you suggest, your private notes, the week you asked for, and the chef's replies and status. Only you and the chef can see these. They are never shown to other customers.

Drafts you have not sent are kept in your own browser only, never on our servers. Signing out removes them from that device.

Emails

We email you only about your account: to confirm your address and to reset a password. We do not send newsletters or sell or share your address.

Who handles your data

Cloudflare hosts the site and its database and runs the "I am human" check on sign-up, sign-in and sending a suggestion. Our mail provider, Purelymail, delivers the emails. They process data only to do those jobs.

Abuse limits

To stop people from guessing passwords or flooding the site, we count attempts per address and per network. These counts are stored in a scrambled form and deleted within a day.

Deleting your data

• Delete my account is on your account page. It needs your password and removes your account, your sign-ins, and every suggestion, note and reply, right away.
• You can withdraw a suggestion any time before the chef replies.
• Suggestions the chef has finished with (cooked, not this time, or withdrawn) are deleted automatically after a year. Ones still being decided stay until you withdraw them or delete your account.
• An account whose email was never confirmed is removed after a week.
• If you cannot sign in, message us on Instagram and we will delete it for you.

Questions

Message us on Instagram. If this page changes in a way that matters, the date at the top changes too.