Back to Dowei Kitchen

Privacy

Favorites and optional email accounts

Hearts save your favorites in this browser immediately and help rank recipe suggestions. The favorites page does not require an account. Optional email-code sign-in and cross-device sync are available. Cooking and local favorites still work without an account.

Requesting a sign-in code sends your email address and a short-lived code through Resend. Cloudflare D1 stores your email, hashed sign-in codes and session tokens, favorites, fridge selections and shopping state. Codes expire in 10 minutes and work once in the requesting browser. Session cookies are Secure, HttpOnly and SameSite=Strict; they expire after 14 days, or 7 days without sync activity. Guest records merge only after you choose to sign in. Account data is kept until you delete the account; the account menu will offer deletion after recent sign-in. Signing out clears synced records on that device; deleting an account also removes its server records, not provider logs or backups. Legacy member and photo records use the separate retention and contact process below.

Updated November 7, 2026

On your device

We use this browser’s localStorage for language, ingredients, menus, servings, shopping checks, preferred store, favorites, leftovers and some member/waitlist details. It is not a cloud backup. Clearing site data removes local records, not data already sent to servers. Some member ingredient selections also synchronize with our API when available.

Optional email registration

The waitlist sends your email, language, registration time, source page and selected recipe IDs to Formspree. Pending submissions can remain in a local retry queue; your signup email is remembered in the browser. Formspree applies its own privacy policy. Registration is optional.

Optional member photo service

When this feature is available and you submit a photo, our API receives the photo, email, member code, language, ingredient selections and optional notes. It checks access and quotas and lets authorized operators review the submission for the requested service. Upload metadata includes browser user-agent and country. Avoid faces, receipts and other private information. The inspected API stores uploads; it does not itself make an automatic AI image-analysis call.

Server retention

The photo API sets a 48-hour expiry on image files and a 30-day expiry on request records. On completion it deletes the image, clears notes and replaces the request email with a hash; this does not delete the separate member email. Member records and synchronized ingredient state have no automatic expiry in current code. Quota and rate-limit records also have expiry settings. Formspree notifications contain request ID, language and time, not the submitted photo or email. These settings are not a guarantee about all provider logs and backups.

Shopping services

Walmart cart links include matched product IDs and package counts; store searches include ingredient search terms. You review products and pay at the retailer, under its own policies. We do not collect retailer passwords or checkout card details. If configured and available, our shopping API sends ingredients and quantities to Instacart to create a shopping link, cached for up to six days.

Hosting, fonts and tracking

Cloudflare hosts this site and API and processes network requests. Pages using Google Fonts send requests to Google. These providers may process IP addresses and request information. If approved affiliate tracking is enabled in future, Walmart/Impact may set or recognize cookies and receive visit/purchase information for attribution. Current ordinary cart links are not represented as already earning commissions.

Choices and requests

You can browse without email registration or photo uploads. Use browser controls to clear site storage or manage cookies; clearing local data does not delete server records. Contact the operator below for privacy questions or access/deletion requests. No automatic server-deletion tool or guaranteed response deadline is claimed. Retailers and other providers manage data under their own policies.

Operator and contact

Dowei Kitchen · roy-cw22-b8jvcn@mail.grokbot.com