Privacy Policy
Last updated: 7 October 2026
Information we collect
We do not require an account to browse eatmundo. If you allow it, we use Google Analytics to understand aggregate usage patterns (pages viewed, searches, language preference, and clicks on recipe recommendations). This data is anonymized and not linked to your identity. Independently of that choice, we count page views and a few button clicks (such as opening a shopping list) with Vercel Web Analytics, which sets no cookies and stores nothing on your device: it records the page, the referring site, the country and the device type, and recognises a visit only by a value derived from the request that Vercel discards within 24 hours.
Cookies and your choices
We ask for your consent before loading Google Analytics or the Meta Pixel, the only scripts on eatmundo that use cookies or track you. Until you accept, neither runs. Analytics covers Google Analytics (which pages and searches are popular); Marketing covers the Meta Pixel (whether our social posts bring visitors). You can change or withdraw your choice at any time via the “Cookie preferences” link in the footer. Separately, if you use the swipe or Liked features we store a random device identifier in your browser so your likes survive a reload — it is not a cookie, is not shared, and holds no personal data. We do not currently serve ads on eatmundo.
Your account (optional)
An account is optional and nothing on eatmundo is hidden behind one. If you choose to create one, the only personal data we store is your email address. We use it for two things: sending you a sign-in link (we do not use passwords), and linking the weekly menus, shopping lists and liked recipes you already made so they follow you across devices. We do not send marketing email. You can ask us to delete your account and everything attached to it via the Contact page. To keep the sign-in form from being abused to send unsolicited email, it is protected by Cloudflare Turnstile — a bot check that sets no cookies and does not track you across sites.
Developer interface (MCP)
eatmundo runs a public interface at /api/mcp that lets AI assistants query our dish data. It needs no account and no key. To find out how many distinct clients actually use it, we store one row per day per client: the date, the name and version the client software reports about itself, and a deliberately coarse value derived from the IP address — the first four characters of a salted hash, so that a single value corresponds to roughly 65,000 possible addresses. The IP address itself is never stored and the value cannot be reversed. We do not store the questions asked or the answers returned. These rows are deleted automatically after 90 days.
Technical error reports
If something breaks on a page — in your browser or on our server — we send a short technical report to Sentry, the error-tracking service we use (servers in the United States). A report from your browser contains only the error message, the page path (without search terms or any other query parameters) and the name and version of your browser and operating system. It sets no cookie, stores nothing on your device and is not linked to you or to your account. Your IP address is used only briefly, in memory, to limit how many reports one visitor can send, and is not written anywhere. We use these reports solely to find and fix bugs.
Third parties
We use the following service providers. They process data only to provide their service to us; we do not sell personal data. · Vercel — hosting, content delivery, recipe image storage and the cookie-free statistics described above. · Supabase — our database, including account email addresses (servers in Frankfurt). · Resend — sends sign-in links (servers in the United States). · Google — Google Analytics, only with your consent. On comparison pages with a video, the preview image is loaded from YouTube’s image server, which passes your IP address to Google but sets no cookie; the video itself loads from youtube-nocookie.com only when you press play. · Meta — the Meta Pixel, only with your marketing consent. · Cloudflare — Turnstile, the bot check on the sign-in form. · Sentry — technical error reports (servers in the United States). Recipe photos are kept in our own storage; many come from Wikimedia Commons and show their author and licence on the recipe page.
Contact
Questions about this policy can be sent to us via our Contact page.