Privacy policy

Minced is run by an individual as a portfolio project, not a company. To ask a question or make a request, open an issue at github.com/knp4830/minced/issues. Issues are public, so do not put private details in one. For an account request, say only that you want it handled, and we will tell you how to confirm it is you.

Without an account, we do not keep a profile of you, and searching and browsing are not recorded against a person. If you use the “What's in my fridge” picker, your picks are saved in your own browser storage on your device. They are also sent in the page address (/pantry?pantry=…) each time you tap “show recipes”, so our server can find matching recipes. They are not tied to an account, but they may appear in our hosting provider's request logs alongside your IP address. The same goes for the cookware you say you own (“My cookware”): it is kept in your browser storage and sent in the page address (ownedCookware=…). Your shopping list, when you are not signed in, is kept only in your browser storage and is never sent to us.

With an account:

• Your email address, so you can log in and recover your password.
• A hashed password. We never see or store the password itself.
• The recipes you save (your favourites).
• The cookware you say you own, if you set “My cookware” while signed in.
• Your saved fridge, if you keep one while signed in: the ingredients, and the purchase dates, expiry dates and amounts you add to them.
• Your shopping list, if you use it while signed in: the ingredients and amounts, which recipe they came from, and what you have ticked off.
• When the account was created.
• Sign-in logs (IP address and browser) that Supabase keeps for security, such as when you log in or reset a password.

Accounts have a public profile record (an id and an optional display name). It holds no email and no other personal details today.

We do not run analytics, advertising, or tracking scripts, and we do not collect your date of birth, location, or payment details. We do not sell or share personal information.

Logging in sets cookies that keep you signed in (their names start with sb-). They exist only to remember that you are logged in, and are removed when you log out (at the latest they expire after about 13 months). Because they are strictly necessary for the login you asked for, there is no cookie banner. Nothing else on Minced sets cookies. (Your fridge picks are saved in browser storage on your device, not in cookies.)

These services process data on our behalf. We have no other recipients.

• Supabase stores accounts and saved recipes in a database hosted in the United States and sends the sign-up and password-reset emails.
• Vercel hosts the site. Like any web host, it sees your IP address and the pages you request in its server logs.

Some recipe photos load from Wikimedia Commons or Supabase Storage. Your browser contacts those servers directly to fetch them, so they can see your IP address, as with any image on any website. Fonts are served from Minced itself.

• Running your account (email, password hash, saved recipes, cookware, fridge, shopping list): needed to provide the account you asked for (contract).
• Sign-in logs: our legitimate interest in keeping accounts and the site secure.

Our processors are based in, or may process data in, the United States. Where data moves from the EU, UK or Switzerland, it relies on the processor's Standard Contractual Clauses and, where they are certified, the EU-US Data Privacy Framework.

For as long as the account exists. When you delete the account, your email, password hash, saved recipes, cookware, fridge and shopping list are removed immediately. Security logs (which can include your email and IP address) and routine backups age out on the host's own schedule, and are never restored for any purpose except recovering the whole site.

• Delete everything: Account, then Settings, then Delete your account. It works instantly, with no email to us required.
• See or correct your data: your email, saved recipes, cookware, fridge and shopping list are all there is. Your email and saved recipes are visible on your account page, your cookware in the “My cookware” filter, your fridge on My fridge and your list on the shopping list. You can download a copy from Settings (“Download my data”). To change your email, open an issue.
• Whatever your local law gives you (access, deletion, correction, portability, objection), you can ask, and we will honour it. California residents: we do not sell or share personal information.

We do not respond differently to browser “Do Not Track” or Global Privacy Control signals, because there is no tracking for them to switch off.

Minced is for people 13 and older. We do not ask for a date of birth. If we learn that an account belongs to a child under 13, we delete it.

If this policy changes, the date above changes. Earlier versions stay in the project's public history on GitHub.