Privacy Policy

We may collect:

• email address;
• name;
• authentication identifiers and account status;
• basic profile information received through Google sign-in or another authentication provider; and
• preferences and settings associated with your account.

We do not receive your Google or other third-party account password.

We collect content you choose to submit, including:

• recipe text you paste into the Service;
• an optional source, story, attribution, or provenance note;
• AI-generated recipe titles, ingredients, instructions, notes, and other structured content;
• edits and corrections you make;
• section names, category choices, and recipe organization;
• engraving text, gift messages, and personalization instructions; and
• generated PDFs, card layouts, print files, and shipment selections.

The source field is optional. Please do not include sensitive, confidential, or unnecessary personal information in recipe text or source notes.

If Homelore later introduces image upload or handwritten-recipe processing, we will update this Policy before or when that feature begins collecting images and will explain whether original images are stored, where they are sent, and when they may be deleted.

We may collect:

• purchaser and recipient names;
• billing contact information made available by our payment processor;
• shipping address;
• email address and, if provided or required for delivery, telephone number;
• box material, engraving, card, divider, and other product selections;
• order, shipment, delivery, refund, and support history; and
• gift-recipient information, gift messages, or personalization supplied by a purchaser.

If you provide information about another person, such as a gift recipient, you are responsible for providing it lawfully and only as reasonably necessary for the order. We will use gift-recipient information only to fulfill, deliver, and support the order unless the recipient separately engages with the Service.

Payment-card information is collected directly by Stripe or another payment processor. Homelore does not receive or store complete card numbers, expiration dates, or security codes.

We collect information you provide when you contact us, including emails, support requests, photographs of product issues, survey responses, and records of our correspondence.

When you use the Service, we and our infrastructure providers may automatically collect:

• IP address;
• browser and device type;
• operating system;
• referring page and pages or features accessed;
• dates, times, and approximate request location derived from IP address;
• error, security, and server logs;
• recipe-generation counts and other feature-usage records;
• order and shipment submission events; and
• authentication-cookie and session information.

We may generate or store a random browser or device token in local storage. It is used to enforce limited free use and, where applicable, connect recipes created before account registration to the account later created by that browser. It is not used by Homelore for behavioral advertising.

We may receive information from:

• Authentication providers, such as Google or Supabase, including email address, basic profile information, authentication status, and account identifiers;
• Payment processors, such as Stripe, including payment confirmation, amount, currency, customer contact information, fraud signals, refund status, and transaction identifiers;
• Box makers, printers, packers, and carriers, including production, shipment, tracking, delivery, damage, and return information; and
• Security and infrastructure providers, including logs, alerts, and technical information used to operate and protect the Service.

We use providers that perform services on our behalf, which may include:

Service providers are contractually required to process information only for the purposes of providing services to us and as otherwise permitted by their contracts and applicable law.

We may disclose information when we reasonably believe doing so is necessary to:

• comply with law, regulation, subpoena, court order, or lawful government request;
• protect the rights, property, security, or safety of Homelore, users, service providers, or others;
• investigate fraud, abuse, infringement, or violations of our Terms; or
• establish, exercise, or defend legal claims.

We may disclose or transfer information in connection with a proposed or completed merger, financing, acquisition, reorganization, bankruptcy, sale of assets, or transfer of all or part of the business. A recipient will be subject to this Policy or will provide notice of materially different privacy practices as required by law.

We may disclose information when you direct us to do so, when necessary to fulfill a purpose you request, or with your consent.

We may use and disclose information that has been aggregated or de-identified so that it cannot reasonably be linked to you. We will not attempt to re-identify information that applicable law requires us to maintain as de-identified.

You can access recipe content through your account and may download card PDFs where that feature is available. You may request a copy of personal information we maintain about you by contacting [your email].

You can edit much of your recipe and profile information through the Service. You may ask us to correct inaccurate personal information that you cannot edit directly.

You may delete individual recipes through available account controls or request deletion of your account by contacting [your email].

After verifying the request, we will delete or de-identify covered information from active systems within a reasonable period, generally within 45 days (which may be extended by an additional 45 days where reasonably necessary, with notice to you), except where retention is reasonably necessary for an active or completed order, legal compliance, fraud prevention, security, disputes, backups, or another lawful purpose.

Deleting an account cannot recall or “unprint” physical products already produced or delivered. If an active paid order is associated with the account, we may retain and use information needed to fulfill, support, cancel, or refund that order.

Transactional messages, such as authentication, order, production, and shipment communications, are necessary to provide the Service.

Homelore does not currently send marketing email. If we introduce marketing email, we will provide an unsubscribe mechanism and update this Policy as appropriate.

You can configure your browser to block or delete cookies and local storage. Doing so may prevent authentication, recipe recovery, free-use tracking, or other Service features from functioning properly.

Homelore voluntarily provides the access, correction, deletion, and portability choices described above to its users.

The California Consumer Privacy Act, as amended (“CCPA”), applies only to businesses meeting statutory thresholds and other requirements. If and when the CCPA applies to Homelore, California residents may exercise all rights provided by that law, including the rights to know, delete, correct, opt out of sale or sharing, limit certain uses of sensitive personal information where applicable, and receive nondiscriminatory treatment.

To submit a privacy request, contact [your email]. We may need to verify your identity. Where applicable, an authorized agent may submit a request on your behalf, subject to legally permitted verification.

Where the CCPA applies, we will acknowledge receipt of a verifiable consumer request within ten (10) business days and respond within forty-five (45) calendar days, which may be extended by an additional forty-five (45) days where reasonably necessary, with notice to you. You may make a verifiable request twice within a twelve-month period free of charge.

Depending on how you use the Service, we may collect and disclose for business purposes the following categories of personal information:

• Identifiers: name, email address, postal address, IP address, account identifiers, device token, and order identifiers;
• Customer-record and commercial information: product selections, purchases, payments, refunds, shipment history, and customer-service records;
• Internet or electronic-network activity: browser, device, pages or features used, logs, and interactions with the Service;
• Geolocation information: approximate location inferred from IP address and delivery location provided for shipping;
• User-provided content: recipe text, optional source information, notes, personalization, gift messages, and communications;
• Inferences: limited inferences necessary for fraud prevention, account security, or understanding Service use; and
• Sensitive personal information, in limited circumstances: account login credentials managed by authentication providers and payment information managed by payment processors. Homelore does not use sensitive personal information to infer characteristics about users.

We collect these categories from you, your browser or device, authentication and payment providers, fulfillment and shipping partners, and other service providers. We use and disclose them for the purposes described in Sections 2 and 3.

Homelore uses sensitive personal information only for purposes that are exempt from the right to limit under the CCPA, such as authenticating users, processing payments, providing the Service you request, preventing fraud, and ensuring security. We do not use or disclose sensitive personal information to infer characteristics about you or for any purpose that would trigger the right to limit. For this reason, we do not currently provide a separate “Limit the Use of My Sensitive Personal Information” mechanism. If our practices change, we will update this Policy and provide the required choice before beginning the new practice.

Homelore does not sell personal information and does not share personal information for cross-context behavioral advertising.

Because we do not engage in those practices, we do not currently provide a “Do Not Sell or Share My Personal Information” link. If our practices change, we will update this Policy and implement legally required choices before beginning the new practice.

Homelore does not currently track users over time across unaffiliated websites for targeted advertising and does not permit advertising networks to collect information through the Service for that purpose.

Because we do not sell or share personal information for cross-context behavioral advertising, browser “Do Not Track” and Global Privacy Control signals do not change our current practices. If we later engage in a practice for which applicable law requires us to honor such a signal, we will do so.

California residents may request information about certain disclosures of personal information to third parties for those third parties’ own direct-marketing purposes. Homelore does not currently make such disclosures.

At or before the point at which we collect personal information, we provide notice of the categories of personal information we collect, the purposes for which we use it, whether it is sold or shared (it is not), and the applicable retention periods or criteria. This Policy, together with any notice presented at the point of collection (for example, at account sign-up or checkout), serves as our Notice at Collection. The categories and purposes are described in Sections 1, 2, and 8.2, and our retention practices are described in Section 5.