Privacy Policy
Last updated: 2026-11-05
Cooked.it is in beta. This page explains, in plain language, what we collect, why, and what you can do about it. Questions go to help@cooked.it.
The short version
- We collect what we need to run your Recipe Box and nothing else.
- We do not sell your data. We do not show ads. We do not share your data with advertisers.
- You can ask us to delete your account and your personal data at any time.
What we collect
- Your account: your email address, your password (stored only in scrambled form, we never see it), and the name you choose to show, if you add one, plus your settings (like your app theme and whether recipes show as written, in imperial or in metric).
- Your recipes: the recipes you save, the links they came from, the changes and notes you make to your own copies, the collections you sort them into (the names you give them and which recipes sit in each; only you can see them), and your cook journal: the dates you record cooking a recipe, how it went, and any note or dish photo you add to that cook. Your journal is only ever visible to you.
- Photos and files you upload: the original photos and files you import (like a recipe card or a cookbook page), and any dish photos you add. We keep them for as long as your account exists so you never lose the original. Location data is removed from every copy anyone else can see.
- How you use Cooked.it: things like when you sign in, your Bites balance, and the notifications we send you. We use this to run the app and to fix problems.
- Basic security data: to recognize your devices and stop abuse, we keep a sign-in record per device (a scrambled version of your IP address, your country, and your browser type), and we record a scrambled version of the IP address of anyone opening a share link. The share-link records are deleted automatically after 48 hours. Device sign-in records are kept while your account exists and are deleted with it. The scrambled IP address in them changes daily and is replaced each time you use that device.
- Your cooking profile, if you fill it in: your first name, and only if you choose to add them, your last name, your Zip or postal code, the kinds of cooking you love and want to learn, your skill level, how many you cook for, the kitchen gear you have and your diet. See Your cooking profile and Zip below.
- Cookies: only the ones needed to keep you signed in, remember your device, and finish saving a shared recipe after you sign up. No advertising or tracking cookies.
How we use it
To run your account, import and organize your recipes, let you share them, send you account emails (like confirming your address or resetting your password), keep the service secure, and fix things that break.
Your cooking profile and Zip
Your Profile page is optional apart from your first name, and nothing in the app requires it. If you fill it in, we keep what you enter: your first name, and if you add them, your last name, your Zip (a US ZIP code or a Canadian postal code), what you love cooking and want to learn, your skill level, how many you usually cook for, the kitchen gear you have and your diet.
We use it to suggest recipes, tools and offers that fit how you cook. Your Zip is for things near you, like local grocery prices and stores that deliver to you, as we add them. We don't ask about allergies or health conditions in your profile.
We don't sell your profile or give it to stores or advertisers. Your Zip is not sent to any store.
You can change any of it on your Profile page at any time, or remove all of it with "Clear my profile". It is included when you download everything from Settings, and it is deleted with your account.
Who helps us run Cooked.it
We use a small number of service providers. They process data only to provide their service to us:
- Supabase: our database, sign-in system and file storage. It holds your account, your recipes, and the photos and files you upload, and it sends sign-in emails (confirming your address, resetting your password), either itself or through Resend.
- Vercel: hosts the app, so it handles every request you make, including your IP address and browser type, in its logs.
- Anthropic: the AI that reads recipes and turns them into clean recipes. It receives recipe content (page text, text you type or paste, and photos and files you upload), not your account details, and does not use this content to train its models.
- OpenAI: turns speech into text. It receives the audio of a social media video you import when the post has no written recipe.
- Google Gemini: watches a video for what it says and shows when the post or its captions leave out the recipe's amounts or steps. It receives the public video you import: the link for YouTube, the video file for a public Instagram, TikTok or Facebook post. It receives no account details, and does not use this content to train its models.
- Apify: fetches TikTok posts and their comments, and backs up Facebook and Instagram fetching. It receives the link to the post you import.
- ScrapeCreators: fetches Facebook and Instagram posts and their comments. It receives the link to the post you import.
- Serper: a search service. When a Facebook link can't be read directly, it receives a search built from the post's title or text, to find the public page.
- ScraperAPI: fetches pages that block a normal fetch, Pinterest pages and YouTube captions. It receives the link you import, or the YouTube video ID.
- Scrapfly: fetches pages that block a normal fetch. It receives the link you import.
- YouTube Data API (Google): receives the ID of a YouTube video you import, to read its title, description and comments.
- Vimeo: receives the ID of a Vimeo video you import, to read its details and captions.
- Open Library (Internet Archive): a free book catalogue. It receives the ISBN when you scan a cookbook's barcode.
- Resend: sends some of our emails, like the save-button email you ask for and founder invitations, and delivers the feedback you send to our team. It receives the email address and the message.
- Cloudflare: runs our domain's DNS. It receives no member data.
None of the fetching and search services above receive your account details.
We don't sell or rent your data to anyone, and we don't share it with advertisers.
Sharing recipes
When you share a recipe, anyone with the link can see the recipe and the name you show on Cooked.it. People who aren't signed in see a short preview, not the full recipe. You can stop a recipe from being shared by marking it Top Secret.
If a recipe came from your own handwritten card or family file, the photo of it goes with the share unless you turn that off. Photos of pages from published books or magazines are never shared.
If you invite a friend, we let you know when they join and start saving recipes, using the name they choose to show.
If someone saves a recipe you shared, their copy belongs to them. It stays in their Recipe Box even if you later change yours or delete your account.
Deleting your account
You can delete your account yourself: sign in and choose Delete my account at the bottom of any page or in Settings, then type DELETE to confirm. You're signed out straight away, and we permanently delete your account and your personal data within 8 days. If you can't sign in, email help@cooked.it from the address on your account and we'll do it for you.
Recipes other people saved from your shares stay in their boxes, credited to "a former Cooked.it member." Copies of deleted data may remain in our providers' encrypted backups for a limited time before they are overwritten.
Keeping it safe
Your data is encrypted in transit. Access to your recipes is enforced by the database itself, so other users can't read your Recipe Box.
Children
Cooked.it isn't meant for children under 13, and we don't knowingly collect their information.
Changes
If we change this policy, we'll update the date at the top and let you know in the app.