Privacy policy
Last updated 14 October 2026
WhatToEat.Today is run by WhatToEat.Today (“we”). This policy explains what personal information we collect when you use the site, why, who helps us process it and what you can do about it. Questions? Contact us.
What we collect
- Your account: name, email address and a securely hashed password. If you sign in with Google or Facebook we receive your name, email address, profile photo and an account ID from them, and nothing else (no friends list, no posts).
- What you do with your account: recipes you save, your meal plan, reviews and ratings you post, and for chefs, the recipes, photos and profile text you submit.
- Newsletter: your email address, if you subscribe.
- Contact form: your name, email address and message.
- Sign-in records: while you're signed in we keep your session with the IP address and browser it came from, to keep your account secure.
- Visit statistics: anonymous, aggregated page-view counts (pages visited, referrer, country, device type) through Vercel Web Analytics. It uses no cookies and does not identify you.
Why we use it
To run your account and the features you ask for (saving recipes, meal plans, reviews, publishing your recipes), to send the newsletter you signed up for, to answer your messages, to keep the site secure and to understand which pages are useful. We rely on our agreement with you for account features, on your consent for the newsletter and personalised ads, and on our legitimate interest in running a safe, working site for security and statistics.
Cookies and your browser
- Sign-in cookie (strictly necessary): keeps you signed in. It's removed when you sign out.
- Cooking progress: the ingredients and steps you tick off are kept in your own browser (local storage), never sent to us.
- Videos: recipe videos from YouTube or Vimeo only load when you press play. YouTube videos use its privacy-enhanced mode; once playing, the provider's own privacy policy applies.
- Advertising: if we show Google ads, Google and its partners may use cookies to show and measure ads and, with your consent, to personalise them. Visitors in the European Economic Area, the UK and Switzerland are asked for consent first. You can manage ad personalisation at adssettings.google.com and read how Google uses data from sites that use its services.
Who helps us
We don't sell your personal information. These providers process it for us, only to run the site:
- Vercel (hosting and visit statistics)
- Neon (database)
- Cloudflare (storing and serving photos)
- Google and Meta (Facebook), only if you choose to sign in with them
- Google AdSense, when ads are shown
Some of these providers are based in, or process data in, the United States. Where the law requires it, transfers are covered by safeguards such as the European Commission's standard contractual clauses.
What other people can see
Reviews show your name. Chefs' names, profile photos and bios appear with their published recipes and on their chef page. Your email address, saved recipes and meal plan are never shown to anyone else.
How long we keep it
Account information is kept until you delete your account. Newsletter addresses are kept until you unsubscribe. Contact messages are kept only as long as we need them to reply and follow up. A sign-in session lasts 7 days unless you use the site again.
Your rights
You can see your saved recipes and meal plan in My account (chefs can edit their profile in the Chef Portal), and delete your account and personal data at any time. Depending on where you live, you may also have the right to a copy of your data, to object to or restrict how we use it, and to complain to your data protection authority. To use any of these rights, contact us.
Children
The site is not aimed at children under 13, and we don't knowingly collect their personal information.
Changes
If we change this policy we'll update the date at the top and point out important changes on the site.
