Privacy Policy

The short version

We don't ask you to log in. We don't sell anything. We don't pass your data to third parties beyond the analytics tools listed below, which exist so we can see which recipes are useful and which aren't. If you submit a star rating, we hash your IP and use that hash to prevent the same person rating the same recipe twice — your IP itself is never stored.

What we collect

• Aggregate analytics via Google Analytics 4 and self-hosted Umami. Standard page-view and event data — pages viewed, referrer, country, device type, session length. No personally identifying information.
• Recipe ratings are stored as anonymised SHA-256 hashes of your IP address combined with a server-side salt, truncated to 12 characters. We cannot reverse this to find your IP.
• localStorage on your device for your meal plan, shopping list, macro tracker, and serving-size preferences. This data lives on your device only — we never send it to our servers.
• Standard web server logs (IP, timestamp, requested URL, user-agent) for security and abuse-prevention purposes. Rotated every 7 days.

What we don't collect

• Account information — there are no accounts on the public cookbook.
• Email addresses — except when you choose to email us.
• Payment information — the site is free.
• Location data — beyond country-level analytics.

Third-party services

• Google Analytics 4 — anonymised page-view analytics.
• Umami — self-hosted privacy-friendly analytics, no cookies.
• Google Fonts — webfonts (Fraunces, Hanken Grotesk) loaded via Google's CDN.
• Google Tag Manager — for managing the GA4 tag.

That's the entire list. We don't use Facebook Pixel, TikTok Pixel, ad networks, or affiliate trackers.

Cookies

Google Analytics 4 sets cookies (_ga, _ga_*) used for session tracking. Umami sets none. Our own application uses localStorage (not cookies) for your saved meal plans. You can disable cookies in your browser without losing access to any cookbook feature.

Data retention

Web server logs: 7 days. GA4 data: per Google's defaults (currently 14 months). Recipe ratings: indefinitely, but only as anonymised hashes. localStorage: until you clear it.

Children

Desi Family Kitchen is suitable for all ages — it's a recipe site — but we don't knowingly collect data from anyone under 13. If you believe a minor has submitted identifying information, email us and we'll remove it.

Your rights

You can email info@bagason.com to ask what data we hold about you (the answer is generally "none we can tie to you"), to request deletion, or to report a privacy concern. We respond within 30 days.

Changes to this policy

If we update this policy materially, we'll bump the effective date at the top. Routine wording fixes won't be flagged.

Contact

Privacy questions: info@bagason.com. Postal: see our contact page.