Preheating…
What Rich Cuisines keeps about you, why, who else processes it, how long it is kept, and what you can do about it.
Rich Cuisines is run by the site's operator. For anything about your data, use the support form.
Your account: your email address, how you sign in (a password, which only Firebase Authentication holds, or Google), your date of birth check at sign-up, and your settings.
What you share: your profile (name, username, picture, bio, location and website if you add them), recipes, collections, comments, “I cooked this” posts and photos, likes, “Helpful” votes, who you follow and who you block.
What stays private to you: drafts and private recipes, private notes, recently viewed recipes, cooking checklists (kept on your device), your notification and email settings, and the people you share with.
Recipes you save for offline, with their small photos, and your cooking progress (checklists, the step you are on, timers) are kept only on your device, never sent to us. Saved recipes are removed from the device when you sign out, and when a recipe stops being available to you, the next time the device is online.
When you contact us or report something: the support request or report, and our replies and decisions.
To keep the site working and safe: security logs of requests (addresses and times, kept briefly), rate-limit counters, and the browser address for push notifications if you turn them on.
To run the site you signed up for: your account, what you publish and share, notifications you asked for, and the data export and deletion tools. You agreed to this in the terms.
To keep people safe and the site working: moderation, abuse and spam limits, security logs and backups. This is our legitimate interest, and sometimes the law requires it.
Only with your consent: analytics (page views, with no account identifiers), which stays off until you accept it and stops when you withdraw. We do not use your data for advertising, sell it, or train AI on it.
Your profile, public recipes and public collections can be read by anyone, including search engines. “Anyone with the link” items are readable by whoever has the link; items shared with people by name only by them. Comments and “I cooked this” posts are visible wherever their recipe is.
Photos are resized before anyone sees them, and the public copies carry no location or camera data. The original you uploaded stays private.
Your email address is never shown to other members.
We use service providers who process data only to run the site: Google (Firebase hosting, sign-in, image storage, push notifications, and analytics if you consent), Convex (the database), Resend (email) and Cloudflare (the check that guests are people on the support form). Their servers are mainly in the United States; transfers rely on their data-processing terms and the safeguards they provide.
We share data with authorities only when the law requires it, for example to report child sexual abuse material.
Your account and what you share: until you delete them. Deleting your account removes your profile, recipes, collections, comments, photos and settings; it finishes within about a day.
Backups: a deleted account may remain in backups for up to 30 days, after which it is gone; a restore never brings back an account that was deleted.
Security logs: about 30 days. Support requests and moderation records: as long as needed to handle them and any appeal, and to keep the site safe, and then deleted.
Data exports are deleted from our storage within two days of being made.
Download your data from your account settings, and correct your profile there at any time.
Delete your account from your settings. A disabled account can delete itself through a link sent to its email address.
To object to how we use your data, restrict it, or ask anything else, use the support form; we answer within a month. You can also complain to your data protection authority.
You must be at least 13 to have an account (older where your country requires it). We do not knowingly keep children's data below that age; if we learn of it, we delete the account.
When this notice changes in a way that matters, we say so on the site before it takes effect.