Privacy Policy

This Privacy Policy explains what information Salt & Temper collects, how we use it, and the choices you have. By using the Service you agree to this Policy.

1. Information we collect

• Recipe text you submit. The ingredient and instruction text you paste into the demo, so we can parse it and estimate macros.
• Usage analytics. Cookieless analytics about how the demo is used, including page views, the recipes you analyze or re-engineer (the ingredient text and the resulting macros), the macro targets you set, and which steps of the plan quiz you complete. We use this to understand demand and improve the accuracy of the engine. If you use the demo without an account, this data is not linked to your identity. If you are signed in to an account, your usage is associated with your account so we can operate, support, and improve the Service.
• Session replays. Our analytics may also record how visitors use the pages (clicks, scrolling, and what is shown on screen, which can include the recipe text and results you are working with) so we can find and fix usability problems. For visitors without an account, replays are not linked to your identity; if you are signed in, they may be associated with your account.
• Feedback you submit. If you use the feedback control, the comments you send and the recipe result they refer to, so we can investigate and improve results.
• Waitlist email. If you join the waitlist, the email address you provide, so we can contact you about availability.
• Technical data. Limited request metadata such as IP address and timestamps, used for security, abuse prevention, and rate limiting.

2. How we use information

We use your information to operate and improve the Service, estimate recipe macros, prevent abuse and enforce rate limits, and, if you joined the waitlist, to tell you when the product is available.

We do not sell your personal information for money. We do share limited technical information with our advertising partner (Meta) so we can measure whether our ads work, and California and several other states classify that kind of cross-context advertising as a “sale” or “share.” You can turn it off at any time on our Do Not Sell or Share My Personal Information page, and if your browser sends a Global Privacy Control signal we honor it automatically without you having to do anything.

3. Third-party processing

• AI text processing. Recipe text you submit is sent to our AI provider (Anthropic) to normalize and parse the ingredients. Do not submit sensitive personal information in recipe text.
• Nutrition data. Macro lookups use USDA FoodData Central data, which we host ourselves; your recipe text is not sent to the USDA.
• Analytics. We use PostHog (event analytics and the session replays described above) and Vercel Web Analytics to measure traffic and product usage. They run in a cookieless, privacy-preserving mode and do not build advertising profiles.
• Advertising measurement. Our pages load the Meta advertising pixel so we can measure whether the ads we pay for reach people who find the tool useful. Unlike the analytics above, it sets cookies and reports visits and actions to Meta along with limited technical data such as your IP address and browser. We never send Meta your recipe text, your email address, or your account details: we turn off the pixel’s automatic collection features, so it reports only the name of the step you reached and never reads what you typed into a form. This is the only advertising technology on the site, and you can switch it off on our Do Not Sell or Share My Personal Information page or by sending a Global Privacy Control signal, which we honor automatically.
• Database. Waitlist emails and submitted feedback are stored with our database provider (Supabase), which processes them on our behalf.
• Transactional email. If you join the waitlist or create an account, confirmation and service emails are delivered through Resend, our email provider, which processes your email address on our behalf. We do not send marketing email without your confirmed opt-in.
• Error monitoring. When something breaks, technical error reports (the page or endpoint involved, the error message, and limited request metadata) are sent to Sentry so we can find and fix the problem. Error reports are configured to exclude personal information: no request bodies and no recipe text are captured.
• Hosting & infrastructure. Our hosting providers (Vercel for the site, Fly.io for the engine) process data on our behalf to deliver the Service.
• Payments. If you purchase a membership, checkout and billing are handled by Stripe, our merchant of record, under Stripe’s privacy policy. Stripe collects your payment details; we never receive or store your full card number. We receive the transaction and subscription status needed to provide your membership. Charges may appear on your statement as “LINK.COM”, the Stripe service that processes the payment.

4. Data retention

We retain waitlist emails until you ask us to remove them or the waitlist is retired, and feedback submissions for as long as they are useful for improving the Service. We keep operational logs only as long as needed for security and abuse prevention. We do not require an account to use the demo.

5. Cookies

The landing page and demo do not require advertising or tracking cookies, and our analytics run in a cookieless mode. Any storage we use is limited to what is necessary to operate the Service.

6. Your choices

You may request access to, correction of, or deletion of the personal information we hold about you (such as your waitlist email) by contacting us at the address below. We will respond consistent with applicable law.

If you have an account, deleting it erases your account data and asks our analytics provider to delete the analytics events associated with your account. One exception: records of payment transactions are retained by us and by Stripe, our merchant of record, for as long as tax and accounting law requires.

7. Children

The Service is not directed to children under 13 (or the minimum age in your jurisdiction), and we do not knowingly collect their personal information.

8. Changes

We may update this Policy from time to time. Material changes will be reflected by updating the effective date above.

9. Contact

Questions about this Policy or your data: saltandtemper@gmail.com.