Privacy, plainly said.

Cinder & Sorrel is an independent recipe project run out of the UK. If you'd like to reach us about anything on this page, contact the kitchen via the address in the site footer.

When you make an account we hold:

• Your email address and a hashed password (we never see the plaintext).
• Your favourites, cookbooks, and any cook photos you upload.
• Any recipes you generate via the AI generator, so we can rate-limit fairly.

If you subscribe, Stripe handles your card details on their systems. We only store your Stripe customer and subscription IDs so we can honour your plan.

We do not use analytics trackers, advertising cookies, or session replay tools. No pixels, no fingerprinting.

• To let you sign in and see your saved recipes.
• To generate AI recipes and plating photos on demand (see below).
• To bill you fairly if you're on a paid plan.
• To moderate submitted cook photos before they appear on a recipe.

We do not sell, rent, or share your data with third-party marketers. Ever.

Three services help the kitchen run:

• Stripe — processes your subscription payments. Their privacy policy is at stripe.com/gb/privacy.
• Anthropic (Claude) — writes recipe text when you use the AI generator. Your prompt (dish idea, region, season, focus) is sent to Anthropic through Emergent's key. Prompts are not tied to your account by Anthropic.
• Google (Gemini "Nano Banana") — generates the plated photograph for each recipe. Only the recipe's title and plating notes are sent — no personal data.

We set one cookie: a session token so we know it's still you between page loads. It's marked HTTP-only and secure. We don't set marketing or analytics cookies.

Under UK & EU GDPR you can:

• See what we hold on you.
• Correct anything wrong.
• Delete your account — this removes your favourites, cookbooks, cook photos, and Stripe customer link.
• Cancel your subscription any time from /account.
• Take your data with you (email us and we'll export it).

Account data lives as long as your account. If you delete your account, your personal data is removed within 30 days. Anonymised recipe-usage counts may live on for capacity planning — no personal detail attached.

If we ever change how we handle your data, we'll update this page and, for anything material, email account holders in advance.