Privacy Policy

Dash of Chef is a recipe-discovery service operated by Yayah Creative LLC, a Minnesota limited liability company (“Dash of Chef,” “we,” “us,” “our”). This policy covers www.dashofchef.com and the services we provide there. If you have questions about it, email us at hello@dashofchef.com.

We collect only what we need to run the service:

• Account information. If you register with an email and password, we collect your email address and a securely hashed password. If you sign in with Google, see section 3.
• Profile information. Optionally, a display name, short bio, dietary preferences, and links to your social profiles.
• Recipe submissions. If you submit a recipe, we collect the recipe content along with the name and email address you provide, and any images or video you upload.
• Comments and ratings. The name, email address (where requested), and content you submit. Your email is never displayed publicly.
• Waitlist and mailing sign-ups. Your email address, and optionally your name, preferred store, and ZIP code.

Signing in with Google is optional — you can always register with an email and password instead.

What we request. When you choose “Sign in with Google,” we ask Google only for the basic sign-in scopes: openid, email, and profile. That gives us your Google account’s email address, name, and profile picture. We do not request access to Gmail, Google Drive, Google Calendar, Contacts, or any other Google service, and we cannot read any of them.

How we use it. Solely to create and authenticate your Dash of Chef account, to identify you when you return, and to contact you about your account. We do not use it for advertising or profiling.

How we store it. Your email address and basic profile details are stored in our database, hosted by Supabase, and protected in transit and at rest. We do not store your Google password — Google handles authentication and only tells us that it succeeded.

How we share it. We do not sell, rent, or transfer Google user data to third parties, and we do not use it for advertising, credit assessment, or lending. It is shared only with the infrastructure providers listed in section 6 that operate the service on our behalf, or where the law requires it.

Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

How to revoke it. You can disconnect Dash of Chef at any time from your Google account permissions page, or ask us to delete your account entirely (see section 8).

• Usage and analytics. We use Google Analytics and Google Tag Manager to understand how the site is used — pages viewed, approximate location, device and browser type, and referring site.
• Shopping activity. When you tap to send a recipe’s ingredients to Instacart, we log that the click happened, which recipe it was for, and where on the site it came from. If you are signed in, that record is linked to your account; if you are not, it is recorded without any identifier.
• Votes. If you vote on a recipe without signing in, we store a random identifier in your browser so the same vote is not counted twice. It is not linked to your identity.
• IP address. We read your IP address to rate-limit abusive traffic and block spam. It is held in memory only for that check and is not written to our database.

• Essential cookies. Set by Supabase to keep you signed in. The site cannot work without them.
• Analytics cookies. Set by Google Analytics and Google Tag Manager to measure usage.
• Local storage. We store your light/dark theme choice and, if you vote on recipes, an anonymous voter ID. These stay in your browser.

You can block or delete cookies in your browser settings, and you can opt out of Google Analytics using Google’s opt-out add-on. Blocking essential cookies will sign you out.

We do not sell your personal information. We share it only with providers who operate the service for us, and only as far as they need it:

• Supabase — our database, authentication, and file storage.
• Vercel — website hosting and delivery.
• Google (Analytics, Tag Manager, Ads) — usage measurement and advertising performance. Google receives usage data, not your account details.
• Resend — sends our transactional email, such as waitlist confirmations and recipe-submission updates.
• Instacart — when you tap to shop a recipe, we send Instacart the recipe itself: its title, image, author name, instructions, and ingredient list. We do not send Instacart your name, email address, account ID, or any other personal information. Once you land on Instacart, you are dealing with them directly, under Instacart’s privacy policy, not ours.

We may also disclose information if the law requires it, to enforce our Terms of Service, to protect our rights or someone’s safety, or to a successor if the business is sold — in which case this policy continues to apply.

Your display name, bio, social links, and any recipes, comments, or ratings you publish are visible to anyone who visits the site. Your email address, password, and dietary preferences are never published. Please do not put anything in a public field that you would not want the world to read.

You can, at any time:

• View and edit your profile from your account page.
• Unsubscribe from any marketing email using the link in its footer.
• Ask us for a copy of the personal information we hold about you, ask us to correct it, or ask us to delete your account and its data — email hello@dashofchef.com and we will respond within 30 days.

Depending on where you live, you may have additional rights — for example under the California Consumer Privacy Act or the EU/UK GDPR — including the right to know what we collect, to have it deleted, to opt out of its sale (we do not sell it), and not to be discriminated against for exercising those rights. Use the same email address to make any of those requests. Where the GDPR applies, we rely on your consent for analytics and marketing, on the performance of our contract with you to run your account, and on our legitimate interests to keep the service secure.

Note that deleting your account does not automatically retract recipes you have published; tell us in your request if you want those removed too.

We keep your account information for as long as your account is open. When you ask us to delete it, we remove it from our live systems within 30 days, apart from anything we must keep for legal, tax, or fraud-prevention reasons. Analytics data is retained on Google’s standard schedule. Anonymous records that cannot be traced back to you may be kept indefinitely.

We protect your information with encryption in transit, encryption at rest, hashed passwords, and database rules that stop one user from reading another’s private data. No service can promise perfect security, but if a breach ever affects your personal information we will tell you as the law requires.

Dash of Chef is intended for adults and is not directed to children under 13. We do not knowingly collect personal information from them. If you believe a child has given us information, email hello@dashofchef.com and we will delete it.

We operate in the United States, and our providers store and process information there. If you use the service from outside the U.S., you understand that your information will be transferred to and processed in the United States, where privacy laws may differ from those in your country.

We may update this policy as the service evolves. When we do, we will change the effective date at the top of this page, and for material changes we will give you notice on the site or by email before they take effect.

Questions, requests, or complaints about privacy: hello@dashofchef.com
Yayah Creative LLC, Minnesota, United States.