Terms of Service & Privacy Policy

This policy explains the data Mostly Recipes handles, where it is stored and processed, the third parties involved, and your choices.

In this Privacy Policy, "we," "us," and "our" refer to Justin Williams, the individual operator of Mostly Recipes. Privacy requests may be sent to support@mostly.recipes.

• Name, email address, and profile image when supplied by an authentication provider
• Authentication-provider account identifier used to link and recognize sign-ins
• Session identifiers and timestamps, IP address, and user agent used for security, rate limiting, abuse prevention, and operations
• Hashed one-time-code verification records needed to complete email sign-in
• The Mostly app where an account was established, a validated acquisition source when available, and first, last, and daily account-backed app-use observations
• A browser cookie remembers the last sign-in method used so the sign-in screen can highlight it
• Account role and Mostly+ entitlement status
• Subscription status, billing metadata, and Stripe customer and subscription identifiers
• Credit Pack purchase status and cross-app credit ledger history

Mostly Account sign-in uses emailed one-time codes or Google and Microsoft authentication when configured.

• When you send a message through the contact form, we receive your name, email address, chosen topic, and message, and, if you are signed in, your Mostly Account identifier
• Messages are delivered by email to our support inbox and kept there as long as needed to respond and keep a record of the conversation
• Your IP address is used, in hashed form for rate limiting and by Cloudflare Turnstile for bot protection, to keep the form free of spam

• Recipes and related data you choose to store or sync
• Metadata associated with that content
• Imported URLs, source metadata, and recipe or source images fetched at your request

• Recipe text, source URLs, titles, descriptions, ingredients, prompts, outputs, and related metadata when you use AI features
• Generated image records, AI job metadata, usage-limit counters, and failure information used to provide results and troubleshoot problems

• Ingredient text, parsed quantities, serving information, selected food matches, generated nutrition values, usage-limit counters, and provider failure information when you use nutrition estimates
• Nutrition estimates are requested only when you choose to find or apply an estimate

• Basic usage and performance data collected via Cloudflare Analytics
• Import failure records and security or abuse-prevention events

Images are handled for performance and offline use.

• Images are fetched from third-party sources at your request
• Images may be resized via Cloudflare infrastructure
• Images are cached locally to support performance and offline use
• AI-generated cover images may be stored with your account when you use AI image generation

Nutrition estimates process recipe details only when you choose to use them.

• Ingredient text, parsed quantities, and serving information may be sent to Mostly Recipes servers and USDA FoodData Central to find food matches and calculate approximate nutrition
• Nutrition estimates do not use AI
• Applied estimate metadata and usage counters may be stored with your account to provide results, enforce usage limits, and troubleshoot failures

AI features process recipe details only when you choose to use them.

• Recipe text, source URLs, titles, descriptions, ingredients, prompts, outputs, and related metadata may be sent to AI infrastructure to parse recipes or generate cover images
• Photos you choose for Photo Recipe Import are resized and re-encoded on your device, which removes location and other photo metadata, then sent to AI infrastructure to transcribe the recipe. Mostly Recipes does not store the photos; they stay on your device only until the import finishes or you discard it
• AI features currently use OpenAI models, reached through OpenRouter and routed through Cloudflare AI Gateway
• Generated images and AI job metadata may be stored with your account to provide results, enforce usage limits, cache repeat requests, and troubleshoot failures

The browser extension keeps clipped page content on your device.

• The Recipe Clipper reads the page only when you click it, parses recipes in your browser, and stores its waiting queue in local extension storage
• The extension does not send page content, usage data, or analytics to Mostly Recipes or third parties
• When you open Mostly Recipes, validated clips can be saved to your local Recipe Library; import outcomes and failed source URLs may then be reported by the app under this policy
• Page text from an unrecognized recipe is sent to AI infrastructure only if you explicitly start Chef AI from Mostly Recipes

A connected AI assistant can save recipes to your account and show you the ones it saved, and nothing else.

• When you connect an AI assistant, such as ChatGPT or Claude, we store the connection: the assistant’s registration details, such as its name and callback address, your approval, the date it was last used, and its access and refresh tokens
• A connected assistant cannot read, change, or delete your other recipes or your account information
• Recipes an assistant saves are stored on our servers, on every plan, until you next open Mostly Recipes and they are added to your cookbook. We keep each delivered recipe for 30 days so the assistant can still list and show it, then delete it
• With each saved recipe we store which assistant sent it, its source web address when it has one, and identifiers that keep the same recipe from being saved twice
• When an assistant saves a recipe from a web address, Mostly Recipes fetches that page at your request, as it does for your own imports; it does not use AI features to do so
• Recipes and links returned to an assistant are handled by that assistant’s provider under its own privacy policy
• You can disconnect an assistant in your account settings, under AI assistants. Its tokens stop working right away, and recipes it already saved stay in your cookbook
• Expired and revoked tokens, and assistant registrations you never approved, are deleted automatically. Errors from assistant requests are logged with the connection’s identifier to diagnose failures

• Authenticate users and maintain secure sessions
• Provide optional Mostly Cloud Data synchronization
• Read Mostly+ entitlement status and enforce feature access
• Process subscriptions and payments
• Answer messages sent through the contact form
• Save recipes that AI assistants you connect send to your account, and show them the recipes they saved
• Provide optional AI parsing and image generation features
• Provide optional nutrition estimates when you request them
• Fetch, resize, cache, and display recipe images
• Apply request limits, prevent abuse, diagnose failures, and maintain reliability
• Measure aggregate account acquisition and adoption across Mostly apps
• Respond to support, privacy, and legal requests

Each provider or third-party host processes data under its own terms and privacy policy.

• Cloudflare — application hosting, network delivery and security, operational logging and observability, account and session storage, transactional sign-in email delivery, contact-form email delivery, bot protection, rate limiting, application data storage and databases, caching, image processing, queues, AI Gateway, Mostly Cloud Data storage, analytics
• Google — authentication; may provide a Google account identifier, name, email address, and profile image
• Microsoft — authentication; may provide a Microsoft account identifier, name, and email address; a Microsoft profile photo is not requested
• Stripe — subscription and payment processing through Stripe-hosted checkout and subscription management; card numbers and payment credentials are handled by Stripe and are not stored by the Mostly apps
• OpenRouter — routes optional AI recipe parsing, recipe photo transcription, and image generation requests to OpenAI models
• OpenAI — optional AI recipe parsing, recipe photo transcription, and image generation, reached through OpenRouter
• USDA FoodData Central — optional nutrition data lookup when you request recipe nutrition estimates
• Gravatar — optional avatar lookup from a hashed email address
• Third-party recipe or image websites — fetching recipe content and images at your request
• AI assistants you connect, such as ChatGPT (OpenAI) and Claude (Anthropic) — receive the recipes and links their requests return; their providers’ privacy policies apply

You may request Mostly Account deletion from account settings in Mostly Page or Mostly Recipes, or by contacting us.

• Account, provider, session, entitlement, security, and operational records are retained as needed to provide and protect the Mostly Account, comply with legal obligations, resolve disputes, and enforce agreements
• You must cancel an active paid subscription and wait for in-progress AI work or Credit Pack purchases to finish before requesting deletion
• Accepted deletion requests revoke account access and remove your identity and active app data from active systems used by Mostly within 30 days
• Remaining Mostly AI Credits are forfeited when your account is deleted
• Account deletion does not remove app data stored locally in a browser or on another device, or downloaded backups; you must remove those copies separately
• Payment, security, and operational records may be retained when needed for legal obligations, fraud prevention, accounting, or dispute resolution
• Some user-scoped cloud objects and recovery copies may remain for up to 90 days after you request account deletion
• Deleting your account deletes your AI assistant connections, their tokens, and recipes waiting to be delivered

Depending on your location and applicable law, you may have rights to access, correct, delete, export, object to, or restrict processing of personal information.

Send requests to support@mostly.recipes. We will respond as required by applicable law.

We do not sell personal information or share it for cross-context behavioral advertising.

• We do not use advertising or cross-site tracking cookies
• We collect limited information about how you use Mostly Recipes to understand usage, improve features, and maintain reliability. This information may be linked to your Mostly Account using a coded identifier.
• Product analytics do not include the content you create or store in Mostly Recipes, except the web address of a page you import a recipe from, which helps us improve recipe import.
• Cloudflare may process IP addresses, requested URLs, timestamps, browser and device information, and diagnostic or security logs to provide and protect the service
• Because there is no uniform browser Do Not Track standard, we do not currently respond to Do Not Track signals

Mostly Recipes is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child supplied personal information, contact support so we can review and delete it where required.

We may update this Privacy Policy. When we do, we post the updated policy on this page and change the revision date at the top, so check the date to see whether it has changed since you last read it.

Privacy questions and data requests: support@mostly.recipes