Privacy Policy

Last updated: October 29, 2026

This policy explains what information Recipe Box (the "Site"), run by PIT ("we", "us"), collects and what we do with it. We collect as little as we can. We don't sell your information, show ads, or use tracking or analytics cookies.

What we collect

• Account details: your email address, the display name you choose, and your password. We never store your password itself, only a scrambled version (a salted hash) that can't be turned back into it. We also record when you created your account and agreed to our Terms.
• What you post: recipes, descriptions and photos. Before a photo is uploaded, your browser shrinks it and removes hidden details such as the GPS location where it was taken.
• Favorites: which recipes you've saved.
• Log-in cookie: when you log in we set one cookie that keeps you signed in for up to 30 days. It is needed for the Site to work and isn't used for tracking. You don't need cookies to browse recipes.
• Security records: to block password guessing and spam, we count failed log-ins, sign-ups and uploads. These counts are stored with a scrambled (hashed) form of your IP address or email, not the address itself, and are deleted within two days.
• Our host: the Site runs on Cloudflare, which processes every request (including your IP address) to deliver and protect the Site. See Cloudflare's privacy policy.

What's public

Your display name, the recipes and photos you post, and how many people have favorited them are visible to everyone, including people who aren't logged in. Your email address and your list of favorites are not shown to anyone else.

How we use it

Only to run the Site: to log you in, show and store your recipes and favorites, keep the Site secure, enforce our Terms, and reply when you contact us. We may email you about your account or about important changes to our Terms or this policy. We won't send marketing email without asking first.

Who we share it with

We don't sell or rent your information. We share it only with Cloudflare, which hosts the Site and stores its data on our behalf, and when the law requires it (for example, a valid court order), or to protect people's safety or our rights.

How long we keep it

We keep your account until you ask us to delete it. Recipes and photos you delete yourself are removed from the Site straight away.

When we delete your account, we delete your email address, password, display name, favorites and log-in sessions. Recipes and photos you've already posted may stay on the Site, shown as posted by a "Former member" with nothing linking them to you, as our Terms allow. If you don't want a recipe to stay, delete it before you close your account, or ask us to remove a photo that shows you or someone else.

Copies of deleted information can remain in our database backups for up to 30 days before they are overwritten.

Your choices and rights

You can edit or delete your recipes at any time. To see, correct, download or delete the information we hold about you, or to close your account (see "How long we keep it" above for what happens to your recipes), email admin@paytond.me. We'll respond within 30 days. Depending on where you live (for example, the EU, UK or California), you may have further rights under laws such as the GDPR or CCPA, and you can complain to your local data protection authority. Where the GDPR applies, we use your information because it's needed to provide the Site you signed up for, and for our legitimate interest in keeping it secure.

The Site is run from the United States, so your information is processed there and wherever Cloudflare operates.

Children

You must be at least 13 to create an account. We don't knowingly collect information from children under 13. If you believe a child under 13 has an account, email us and we'll delete it.

Security

We use encrypted connections (HTTPS), store passwords only as salted hashes, and limit repeated log-in attempts. No system is perfectly secure, so please use a password you don't use anywhere else.

Changes

If we change this policy in a significant way, we'll tell signed-in users on the Site or by email before the change takes effect, and update the date at the top.

Contact

PIT, admin@paytond.me.