Last updated: May 9, 2026
SortMyFood ("we," "us," "our") operates the SortMyFood web application and progressive web app at sortmyfood.com. This policy explains what data we collect, how we use it, and your rights.
When you create an account we collect your email address, display name, and a password. Your password is hashed before storage — we never store or have access to your plaintext password. You may optionally choose a profile emoji/avatar and a preferred unit system (US or metric).
As you use SortMyFood, we store data you provide to power the service:
If you use expense splitting, we store shopping trip totals, per-item prices, and per-member balance calculations. We do not process payments between household members.
If you enable push notifications, we store your browser push subscription endpoint and encryption keys. We also store your notification preferences (which alerts you want, preferred time of day).
When you scan a product barcode, we look up the product via the Open Food Facts public API and cache the result (product name, brand, category, basic nutrition) to speed up future scans. The barcode number is the only data sent to Open Food Facts.
If you submit feedback through the app, we store your message, the page you sent it from, and your browser's user-agent string. You choose whether to allow follow-up contact.
We do not use cookies, tracking pixels, or third-party analytics. We do not collect IP addresses, device fingerprints, or browsing history. Authentication uses JSON Web Tokens stored in your browser's localStorage.
| Purpose | Data Used |
|---|---|
| Provide the SortMyFood service | All kitchen, recipe, meal plan, and household data |
| Account authentication | Email, password hash, JWT tokens |
| Process payments | Email and name (sent to Stripe) |
| Send transactional emails | Email address, name |
| Push notifications | Push subscription endpoint, notification preferences |
| Barcode product lookup | Barcode number (sent to Open Food Facts) |
| Recipe import | URL you provide (fetched server-side) |
| Community features | Recipes, ratings, comments you choose to share publicly |
| Improve the service | Aggregated, anonymous usage patterns |
We do not sell, rent, or share your personal data with advertisers or data brokers.
| Service | Purpose | Data Shared |
|---|---|---|
| Stripe | Payment processing | Email, name, subscription events |
| Open Food Facts | Barcode product lookup | Barcode number only |
| Email provider | Transactional emails | Email address, name, message content |
| Google Fonts | Typography | Standard browser request headers |
| CDN providers | JavaScript libraries | Standard browser request headers |
We do not use any analytics, advertising, or social-media tracking services. Each third party's own privacy policy governs their handling of data.
When you import a recipe by URL, our server fetches the publicly available web page to extract structured recipe data (title, ingredients, instructions). We use standard HTTP requests and, for certain protected sites, a headless browser. We block requests to private/internal network addresses. The imported recipe data is stored in your account. We do not share the URLs you import with any third party.
SortMyFood does not use cookies. We use your browser's localStorage to store:
These are accessible only to the SortMyFood domain and are cleared when you log out or clear your browser data.
Your data is retained for as long as your account is active. You can delete your account at any time from Settings → Account → Delete Account. Deletion is immediate, permanent, and removes:
Content you shared publicly (community recipes, comments, ratings) may persist in anonymized form. You can unshare or delete public recipes before deleting your account.
You can export a complete copy of your data (recipes, homes, pantry items, meal plans) as a JSON file from Settings at any time.
Depending on where you live, you may have the right to:
If you are in the European Economic Area (EEA), we process your data under the legal basis of contractual necessity (to provide the service you signed up for) and, for optional features like notifications and emails, your consent.
If you are a California resident, you have rights under the CCPA including the right to know, delete, and opt out of sale. We do not sell your personal information.
SortMyFood is hosted in the United States. If you access the service from outside the US, your data is transferred to and processed in the US. We rely on contractual safeguards with our service providers (Stripe, email provider) to protect your data.
SortMyFood is not directed at children under 13 (or 16 in the EEA). We do not knowingly collect personal information from children. If you believe a child has created an account, please contact us and we will delete it promptly.
We may update this policy from time to time. If we make material changes, we will notify you by email or through an in-app notice. Continued use of SortMyFood after changes constitutes acceptance.
Questions or requests about your data? Email us at waldmannevan@gmail.com.