We’re Cooked is a roast-dinner planner. Here’s exactly what happens to your data — which is, mostly, nothing.
The dishes, oven setup and settings you enter are saved in your browser’s local storage. They never leave your device and we never see them. Clear your browser data and they’re gone. A “share plan” link encodes the plan into the URL itself — nothing is stored on a server.
You don’t need an account. If you make one to save recipes, we store your username, a salted one-way hash of your password (never the password itself) and the recipes you save: whatever you write in them (name, servings, ingredients, directions, notes) plus any oven settings, every earlier version of each recipe, and your meal diary (dates, dishes and notes). All of it is private to your account. No email, no real name. Signing in sets one essential cookie that keeps you logged in for 30 days; signing out removes it.
To slow down password guessing, sign-in attempts are rate-limited with the same rotating, one-way IP code described below, kept for an hour. Want your account and recipes deleted? Ask via the feedback box with your username.
When you import a recipe from a photo, the photo is read right there on your device. It isn’t uploaded or stored. The text-reading software (Tesseract) is downloaded once from the jsDelivr CDN. Premium accounts can choose to have a photo read by Claude instead: only then are those photos sent to Anthropic to be read. They are not stored by us.
If you add your own Anthropic API key in account settings, it’s stored encrypted and used only to read the recipe photos you send to Claude. We show back just its last four characters, and “Remove my key” deletes it. Anthropic bills those reads to your key.
If you use the feedback box, your message — plus your email address, if you leave one — is stored in our database so we can actually read it. Along with saved recipes, that’s the only thing that leaves your browser, and only because you pressed the button.
We do not store your IP address or browser details. To block spam we rate-limit using a one-way scrambled code derived from your IP that changes every day — the address itself is never kept. We’ll only email you if you left an address and asked us to.
We use Cloudflare’s privacy-first web analytics to see rough visitor numbers. It sets no cookies and collects no personal data. Cloudflare, who host the site, may keep standard short-lived server logs for security.
If this policy changes, the new version lives here. Questions? Use the feedback box on the main page.
Last updated 11 June 2026.