Privacy policy

This policy explains what personal information CookMatey collects, why, and the choices you have. We aim to collect only what we need to run the features you use, and we handle personal information in line with the Australian Privacy Principles.

What we collect

If you create an account

• Your name and email address.
• Your password, stored only as a one-way cryptographic hash. We never store or see your actual password.
• What you save: favourite recipes, meal plans, shopping lists, private recipe notes and reviews you write.

Reviews are public once approved and show your first name. Recipe notes, meal plans and shopping lists are private to your account.

If you contact us or subscribe

• Contact form: your name, email address and message, so we can reply.
• Newsletter: your email address and the date you subscribed.

Stored only on your device

Without an account, your favourites, meal plan, shopping list, Cook Along progress and display preferences are kept in your browser's local storage. They never leave your device unless you sign in and choose to save them to your account. Clearing your browser data removes them.

Cookies and technical data

When you sign in we set a secure, HTTP-only session cookie so you stay signed in (for up to 30 days). We use your IP address briefly, in memory, to limit repeated sign-in and form submissions; we don't store it with your account. CookMatey does not use advertising cookies, third-party analytics or tracking pixels.

How we use it

• To provide your account and the features you use, and keep them in sync across devices.
• To send emails you ask for: password resets and, if you subscribed, recipe updates.
• To reply to your messages and moderate reviews.
• To keep CookMatey secure, for example by preventing automated abuse.

We don't sell or rent personal information, and we don't use it for advertising.

Who we share it with

We use a small number of service providers to run CookMatey: website hosting, a database provider that stores account data, and an email delivery service. They process information only on our behalf. Some of these providers may store data outside Australia. We may also disclose information if required by law.

How long we keep it

Account information is kept until you delete your account. Contact messages are kept while we handle your enquiry and for a reasonable period afterwards. You can unsubscribe from the newsletter at any time.

Your choices and rights

• Update your name and password on your profile page.
• Delete your account, with all your favourites, plans, lists, notes and reviews, from your profile page. This can't be undone.
• Ask for a copy of your information, a correction, or anything else about your privacy by contacting us.
• If you're not satisfied with how we handle a privacy concern, you can contact the Office of the Australian Information Commissioner (oaic.gov.au).

Security

We protect information with encrypted connections, hashed passwords, access controls and rate limiting. No system is perfectly secure, so please use a unique password for CookMatey.

Changes

If we change this policy we'll update the date at the top of this page. For significant changes we'll let members know by email.