Privacy Policy

Last updated: February 2026

Emma's Recipe Converter ("we", "our", "us") is committed to protecting your privacy. This policy explains what data we collect, how we use it, and your rights.

1. What We Collect

• Account data: Your email address and hashed password (we never store your plaintext password).
• Subscription data: Your Stripe customer ID, subscription status, and plan type. We do not store your payment card details — Stripe handles all payment processing.
• Usage data: The ingredient lists you submit, swap reasons, and the AI-generated results. This is stored to power your swap history feature.
• Session data: A session cookie to keep you logged in. It expires after 30 days of inactivity.
• Server logs: Standard server logs (IP address, request path, timestamp) for debugging and security purposes.

2. What We Don't Collect

• We don't use tracking pixels, cross-site advertising cookies, or analytics services beyond our own server logs.
• We don't sell your data to third parties.
• We don't collect any payment information directly — Stripe handles all of that.

3. How We Use Your Data

• To provide and improve the Service
• To manage your subscription and process payments (via Stripe)
• To display your swap history within the app
• To send transactional emails (Stripe handles subscription billing emails)

4. Third-Party Services

• Stripe — payment processing and subscription management. Stripe's Privacy Policy
• Anthropic — AI model used to generate substitutions. Your ingredient inputs are sent to Anthropic's API to produce results. Anthropic's Privacy Policy
• Google Fonts — font files are loaded from Google's servers. Google's Privacy Policy

5. Data Retention

We retain your account data for as long as your account is active. If you cancel your subscription and request account deletion, we will delete your account data within 30 days. Swap history is retained for your convenience and deleted with your account.

6. Your Rights

You have the right to access, correct, or delete the personal data we hold about you. To exercise these rights, contact us at the email address on our website. If you're in the EU/EEA, you also have rights under the GDPR, including the right to data portability and to lodge a complaint with your local data protection authority.

7. Cookies

We use a single session cookie to keep you logged in. We also use localStorage to track whether you've used your free demo swap — this data never leaves your browser. We don't use any advertising or tracking cookies.

8. Security

Your password is stored using bcrypt hashing. Sessions are managed securely with HTTP-only cookies. We use HTTPS for all data transmission in production.

9. Changes to This Policy

If we make material changes to this policy, we'll notify subscribers by email before the changes take effect.

10. Contact

Privacy questions? Email us at the address on our website.