Privacy Policy
Effective August 23, 2026
This policy explains what information Food Flip collects, why, and what you can do about it. Food Flip is a small, independently-run project — this is written to be a plain, accurate description of what actually happens, not boilerplate.
Information we collect
Account information
To create a flip, like one, or report one, you need an account. You can sign up with an email and password, or sign in with GitHub or Google if those options are offered. If you use GitHub or Google, we receive your name, email address, and profile image from that provider — we never see your GitHub or Google password.
Content you submit
Anything you post — a flip's title, description, ingredients, steps, emoji, and any photo you upload — is stored so it can be shown to other visitors. Your display name is attached to everything you post.
Technical information
When you sign in, we store your session together with the IP address and browser/device information (user agent) the request came from. This is standard practice used to keep accounts secure and to detect abuse — it is not used to track you around the web.
Cookies and local storage
Signing in sets one first-party cookie that keeps you signed in — it's required for the site to work and isn't used for advertising or cross-site tracking. Your browser's local storage is used for a couple of small, non-personal preferences (like whether recipe-change highlighting is turned on, and a short-lived draft of a flip you're in the middle of writing) — these never leave your device.
What's public
Food Flip is a public recipe site. Flips you post — including their text, any photo, and your display name — are visible to every visitor, including people who aren't signed in. Likes are shown as a total count, not a list of who liked what.
How we use your information
- To operate the site — show recipes and flips, keep you signed in, and let you create, like, edit, and report flips.
- To keep the site healthy — rate limiting and abuse detection use your account and recent activity to prevent spam.
- To respond to reports and support requests you or others send us.
- To email you about your account — confirming your address and resetting your password — and, rarely, about activity on your own flips: a single note the first time other cooks like one. There is no recurring or promotional email.
- To find and fix bugs — when something goes wrong, error details (see "Error tracking" below) help us diagnose it.
We do not sell your personal information, and we do not use it for advertising.
Third parties we rely on
Running Food Flip means a few outside services process data on our behalf. None of them are permitted to use your data for their own purposes beyond providing the service to us.
- Turso — hosts the database that stores accounts, flips, and everything described above.
- Cloudflare — hosts the site, stores uploaded flip photos, and provides Web Analytics, which is cookieless and doesn't fingerprint visitors — it gives us aggregate traffic numbers, not individual behavior.
- Sentry — error tracking. When something breaks, Sentry receives the error message, a stack trace, and basic browser/request context so we can fix it.
- Resend — sends our email (address confirmation, password resets, and the occasional note about activity on your flips). Resend receives your email address and the contents of those messages.
- GitHub / Google — only involved if you choose to sign in with one of them, per their own privacy policies.
Security incidents
If a security incident puts your personal information at risk, we'll notify affected users and any authorities required under applicable law — including Puerto Rico's data breach notification law, since that's where Food Flip is operated from — without undue delay.
How long we keep things
Account and content data is kept for as long as your account is active. Records used for rate limiting are short-lived — each one only matters for the hour after it's created and is cleared out automatically the next time you use the related feature.
Your choices
- You can edit or delete any flip you've posted at any time.
- You can request that your account and personal data be deleted by emailing support@foodflip.app. We'll complete the request within a reasonable time. Flips you've posted stay up (removing them would take those recipes' remixes away from everyone else), but they're detached from your name and account — if you'd like your flips removed entirely too, just say so in your request.
- Email about activity on your flips is a one-time note, so there's no list to unsubscribe from — but if you'd rather not get it at all, email support@foodflip.app and we'll make sure you don't. Account email (address confirmation, password resets) keeps working either way — it's how you get back into your account.
- There's nothing to opt out of with analytics — it's cookieless and doesn't identify you in the first place.
Children's privacy
Food Flip isn't directed at children, and you must be at least 13 years old to create an account. We don't knowingly collect information from anyone younger than that.
Changes to this policy
If this policy changes in a meaningful way, we'll update the effective date above. Continuing to use Food Flip after a change means you accept the update.
Contact
Questions about this policy, or want to make a request about your data? Email support@foodflip.app.