Privacy Policy

What the extension reads

The extension has permission to read the pages you visit (http and https). On each page it looks, inside your browser, for recipe markup that the site publishes for search engines (schema.org Recipe in application/ld+json). If it finds one, it shows a dot on the toolbar icon. Nothing leaves your browser at this point.

When the StoveTab side panel is open on a tab that has a recipe, the extension sends that page's address, its site name, its recipe markup and the HTML of its recipe card to our server, which turns it into the cook page you see. It does not send your browsing history, pages without a recipe, form contents or anything typed on a page. When you cook, it outlines the current step on the author's page; that happens only in your browser.

The extension also uses your browser to set cook-mode timers and show their notifications, to keep your screen awake while a recipe is open, and, only if you turn on hands-free, to ask for the microphone.

What we store

• Recipes from websites: the recipe as the page published it (name, author, site, address, photo address, ingredients, steps, times, servings, nutrition, notes, equipment). These records are about the recipe and aren't linked to the person who opened it.
• Your account, if you make one: your email address, an optional display name, when you last signed in, and a hashed one-time sign-in code. Each signed-in session stores the IP address and browser it came from.
• What you do while signed in: saved recipes, ratings, private notes, the recipes you log as cooked (with any photo you add), your shopping list, recipes you add yourself (with their photos) and the API tokens you make (we keep only a hash of each token).
• Counts: we count clicks through to an author's page per recipe, as a total, so we can show authors the traffic we send them. Those counts aren't linked to you.
• In your browser: cook pages remember your place, checked-off items and hands-free setting in your browser's local storage. A session cookie keeps you signed in. We don't use advertising or analytics cookies.
• Server logs: like any website, our servers log requests (including IP address, browser and what was sent) to run and secure the service. Logs are kept only as long as we need them for that.

How we use it

Only to provide and improve StoveTab: to show cook pages, keep your kitchen (saves, cooks, list, notes, uploads), sign you in, answer the questions you ask, count referrals for authors, prevent abuse and keep the service running. We send email only to sign you in.

Who else handles it

• Anthropic: when you use “Ask about this recipe”, your question and the recipe's text are sent to Anthropic's Claude to write the answer. We don't keep your questions or the answers in our database (they can appear in our server logs).
• Speech recognition: hands-free mode uses your browser's built-in speech recognition. In Chrome, Google processes that audio. StoveTab never receives your audio; the page only looks for a few commands (“next”, “back”, “repeat”, “start timer”).
• Google Fonts: our pages load their fonts from Google, which receives your IP address and browser details when they load.
• Service providers who host our servers and data and deliver our email, acting on our behalf.
• Recipe sites: when you follow a link to an author's page, that site sees your visit, as it would anywhere. Recipe photos load from the author's own site.
• The law: we'll disclose information if the law requires it, or to protect people or the service.

Some things are public because you choose to share them: a cook you share by link, a recipe of yours set to “anyone with the link”, and your display name on what you share. Ratings show publicly only as an average once a recipe has five.

Limited use

We do not sell your data. We do not use it, or transfer it, for advertising, for credit or lending decisions, or for any purpose unrelated to StoveTab's cooking features. Data the extension collects is used only to provide those features, and people see it only when we need to for security, to fix a problem you report, or to follow the law. Our use of information received from the extension follows the Chrome Web Store User Data Policy, including its Limited Use requirements.

Keeping and deleting it

We keep your account data until you ask us to delete it. You can delete your own recipes and revoke API tokens from your account at any time. To delete your account and what's linked to it, or to get a copy of your data, email hello@akdarrah.com from the address you sign in with. Recipe records from public websites aren't personal data and may be kept.

Security

Connections are encrypted (HTTPS), sign-in uses one-time codes instead of passwords, and tokens and codes are stored hashed. No system is perfectly secure, but we work to protect what you trust us with.

Children

StoveTab is not for children under 13, and we don't knowingly collect their information. If you believe a child under 13 has given us information, email us and we'll delete it.

Changes

If we change this policy, we'll update it here and change the date above. If a change matters, we'll tell you before it takes effect.

Contact

Questions or requests: hello@akdarrah.com. AKDARRAH LLC, Carmel, Indiana.