About Itadaki

Privacy

What is kept with your account

• From Google, when you sign in: your Google account's id, your name, your email address and the address of your profile picture (the picture itself is never loaded or shown). Itadaki asks Google for nothing else and does not keep Google's access tokens.
• Your sign-ins: one row for each device you are signed in on, with the browser's name and version but no network address. A sign-in lasts 30 days from when you last used it.
• Your recipes, with their ingredients, steps, notes, tags and servings, your own tags and your measure system. Nobody else can see them: there are no public pages and no sharing.
• Your photos, in a private storage bucket. They are made smaller in your browser before they leave your device, which also removes where they were taken and any other camera data; the server checks that again. They are shown only to you, through links that work for ten minutes.
• A recipe you bring in from a link keeps the link to its page, and its photo is copied into your private storage. Itadaki's server fetches that page and its picture, so the site sees the server and not you.
• A photo that ends up on no recipe (picked, then not saved) is removed a day later.

To keep the app safe

• The server counts requests per network address, and new recipes, photos and imports per account each day, to stop abuse. It also counts new accounts each day, without anything about who made them. It keeps a scrambled form of the address or account that cannot be turned back, and a daily clean-up deletes old counts.

On this device

• Cookies: only the sign-in cookie, and only once you sign in.
• Your browser's storage keeps the light or dark theme you picked, and your cook timers, so they keep running while you move between steps. Signing out and deleting your account clear the timers. Nothing in it is sent anywhere.
• The converter works without signing in and sends nothing: the sums are done in your browser.

Where it runs

Itadaki runs on Vercel (the app), Neon (the database) and Cloudflare R2 (the photos), and signs you in with Google. There are no analytics, ads or trackers.

Deleting your account

“Delete my account” in settings removes your photos from storage, then your account, your recipes, your tags, your settings and your sign-ins, all at once. It cannot be undone.