Privacy
What we hold,
and why
Draft — needs legal review before launch
This describes what the site actually stores and does. It is accurate to the software; it has not yet been reviewed by a solicitor, and the controller details below need filling in before launch.
What we store
- Your account. Name, email address, and a hashed password. We never store the password itself.
- What you save. The recipes you have saved, and any reviews you write.
- Your membership. Whether a subscription is active, when it renews, and an identifier linking you to your billing record at Stripe.
What we do not store
We never see or hold your card details. Payments are handled entirely by Stripe, and card data goes to them directly without passing through this site.
Cookies
One essential cookie keeps you signed in — without it, accounts cannot work. Measurement cookies only load if you allow them, and you can decline in a single click. Declining does not limit anything on the site.
Your rights
You can download everything we hold about you, and delete your account, from My Kitchen — no email request needed. Deleting removes your account and detaches your name from any reviews you left.
Who processes your data
- Stripe — payments and subscription billing.
- Vercel — serves the site.
- Neon — the database holding your account, and storage for the photography.
- Resend — sends account emails such as password resets.
To be completed before launch: the registered company name and address of the data controller, a contact address for data requests, the ICO registration number, and the retention period for inactive accounts.
Measuring the site
We count page views, recipe views and searches so we know what to write next. This uses no cookies and stores no IP address: each visit is counted with a code made from your browser details that changes every day, so a visit today cannot be linked to one tomorrow. If you are signed in, we also note when you last visited. Individual records are deleted after 90 days; only daily totals are kept.
The Premium waitlist
If you ask to be told when Premium opens, we keep your email address for that one message and nothing else. It is deleted once we have told you, or straight away if you ask.
Food orders
If you order food from us, we keep your name, phone number, email, postcode, delivery address and order so we can confirm, cook and deliver it, and for our accounts. We use them for nothing else. Ask us and we will delete them once the order is settled and our records no longer need it.
Last updated 12 October 2026.