Privacy Policy

1. Information We Collect

We collect the information needed to provide Thyme Keeper's recipe storage and meal-planning features:

• Account information — your name, email address, and a hashed password when you register.
• Sign-in data — if you sign in with Google or a passkey, we receive your name, email address, and profile picture from your identity provider, plus the credential identifiers needed to authenticate you. We never see or store your Google password.
• Content you create — recipes, ingredient lists, meal plans, reviews, private notes, collections, and images you upload.
• Household data — household membership, roles, and shared meal plans.
• Usage data — basic technical logs (pages requested, errors) needed to operate and secure the service.

2. How We Use Your Information

• To authenticate you and maintain your account.
• To store, display, and organize your recipes and meal plans.
• To share content with household members or publicly, according to the visibility settings you choose.
• To maintain, secure, and improve the service.

We do not sell your personal information and do not use it for advertising.

3. Cookies

Thyme Keeper uses a session cookie to keep you signed in and a CSRF token to protect form submissions. We do not use third-party tracking or advertising cookies.

4. Sharing Your Information

• Household members — content marked as shared is visible to members of your household.
• Public content — recipes, comments, and collections you mark as public are visible to anyone.
• Service providers — authentication providers (e.g., Google) only as needed to sign you in.

We do not share your information with third parties except as described above or when required by law.

5. Your Rights and Controls

• Export your data — download a full copy of your recipes, notes, and plans anytime from your account settings (Settings → Export).
• Delete your account — permanently remove your account and associated data from Settings.
• Control visibility — mark individual recipes and collections as private or shared.

6. Data Retention and Security

We retain your data for as long as your account is active. Passwords are stored only as salted hashes, and traffic is served over HTTPS. When you delete your account, your personal data is removed from our active systems; residual copies in backups expire on our normal backup rotation.

7. Changes to This Policy

If we update this policy, we will post the revised version on this page with a new "last updated" date. Continued use of the service after changes take effect constitutes acceptance.

8. Contact

Questions about this policy or your data? Email us at support@hodel.com.