1. Information we collect
We collect information in three ways: what you give us, what your sign-in provider shares with us, and what's collected automatically when you use the site.
Information you give us
- Account details. Your email address and, if you sign up with email, a password. We store passwords only in a scrambled (hashed) form that can't be turned back into the original.
- Your recipe library. The links you paste, the recipe details we pull from those pages (title, photo, ingredients, steps, servings and timing), and the categories you file them under.
- Planning tools. Your grocery list, which recipes you added it from, items you check off, and your weekly meal plans.
- Preferences. Settings such as US or metric measurements.
- Messages. Anything you send us when you contact support.
Information from Google, Apple or Facebook
If you choose "Continue with Google", "Continue with Apple" or "Continue with Facebook", that service tells us your email address, an account ID that links your sign-in to your account with us, and your profile photo when one is available. We show the photo as your account picture. We don't receive your password for those services, and we don't post anything on your behalf. If you use Apple's "Hide My Email", we receive a private relay address instead of your real one.
Information collected automatically
- Device and usage information. Your IP address, browser and device type, operating system, the pages and features you use, the links that brought you here, and the date and time of your visits.
- Approximate location. A general location (such as city or region) worked out from your IP address. We don't collect your precise location.
- Cookies and similar technology. Described in Cookies and tracking.
Payment information
When you buy Premium, payment is handled by Stripe. Stripe collects your card details and billing address directly; we never see or store your full card number. Stripe tells us your customer ID, which plan you chose (monthly or yearly), whether your subscription is active, and when it renews or ends.
2. How we use your information
We use the information we collect to:
- run your account and keep your recipes, categories, grocery list and meal plans in sync across your devices;
- fetch and tidy up the recipe pages you ask us to grab;
- provide Premium features, process subscriptions, and send receipts and billing notices through Stripe;
- keep the service secure, for example by limiting repeated failed sign-in attempts and stopping abuse;
- understand how people use The Bare Recipes so we can fix problems and improve features;
- measure how people find the site and how well our marketing works;
- answer your questions and support requests;
- send account emails you need, such as confirming your email address and resetting your password, and important notices about your account or changes to these policies;
- meet our legal obligations and enforce our Terms of Use.
Where privacy laws require a legal basis (for example in the European Economic Area or the United Kingdom), we rely on: performing our contract with you (running your account and Premium), our legitimate interests (security, improving the service, understanding how it's used), your consent (where required for non-essential cookies and tracking), and legal obligations.
5. Recipe websites and other links
The Bare Recipes links back to every recipe's original page, and pages may link to other websites and services. We don't control those sites, and their own privacy policies apply when you visit them. When you open a recipe's original page, that site may set its own cookies and trackers.
6. How long we keep information
- Your account and library. We keep these for as long as your account is open.
- When you delete your account. Your account, recipes, categories, grocery list, meal plans and sign-in sessions are erased from our live database right away. Copies may remain in our hosting provider's routine backups for a limited time until they're overwritten.
- Sign-in sessions. These expire after 30 days, or when you log out.
- Security records. Records of failed sign-in attempts are deleted within about an hour.
- Billing records. Stripe keeps payment records as long as the law requires, even after you cancel or delete your account. Deleting your account also cancels your subscription.
- Analytics data. This is kept according to each analytics provider's settings and policies.
7. Your rights and choices
You can always:
- See and change your information on the Account page, including your preferences and password.
- Delete your account and everything in it from the Account page.
- Cancel Premium from the Account page using "Manage subscription".
- Limit tracking as described in Cookies and tracking.
Depending on where you live (including California and other US states with privacy laws, the European Economic Area, the United Kingdom and Canada), you may also have the right to:
- know what personal information we have about you, and get a copy of it;
- correct information that's wrong;
- have your information deleted;
- opt out of the "sale" or "sharing" of your information, and of targeted advertising;
- object to or limit certain uses of your information, or withdraw consent you've given;
- complain to your local data protection authority.
To make a request, contact us at the Contact us page. We'll respond within the time the law requires, and we may need to confirm your identity first, usually by asking you to write from the email on your account. We won't treat you differently for using these rights. If we turn down your request, you can ask us to reconsider by replying to our answer.
8. How we protect information
We use reasonable safeguards to protect your information. The site is served over an encrypted connection (HTTPS). Passwords are stored only as secure hashes, sign-in tokens are stored in a form that can't be reused if copied, the database is kept outside the public part of the web server, and repeated failed sign-ins are blocked. No website can be completely secure, though, so we can't guarantee absolute security. If we learn of a breach that affects your information, we'll notify you as the law requires.
9. Children's privacy
The Bare Recipes isn't meant for children under 13, and we don't knowingly collect personal information from them. If you believe a child under 13 has created an account, contact us at the Contact us page and we'll delete it.
10. Where information is stored
The Bare Recipes is run from the United States, and your information is stored and processed there. Some of our service providers may process it in other countries. Wherever it's processed, we protect it as this policy describes.
11. Changes to this policy
We may update this policy as The Bare Recipes changes. We'll change the "Last updated" date above and, for significant changes, let you know by email or with a notice on the site before they take effect.
12. Contact us
Questions about this policy or your information? Reach The Bare Recipes at the Contact us page.
See also our Terms of Use.