Legal
Privacy policy
What we collect, why, and what you can ask us to do with it.
Last updated: October 19, 2026
Who is responsible for your data
Occasional Chef is published by OmniLearnConsultingCommerce LLC, a Wyoming company, 30 N Gould St, Ste R, Sheridan, WY 82801. For any question about your data, write to bonjour@occasionalchef.com.
What we collect
If you browse without an account
Technical and audience data: pages viewed, time on page, device type, approximate country, where the visit came from. We use it to see which pages help and to improve the site. See the cookie section below.
If you create an account
Your first name, last name, email address and a password (stored hashed, never in plain text). You can add a bio, a location, a website and an avatar: those appear on your public profile, which is their purpose. The rest of your account (generated recipes, saved recipes, planner, shopping list) stays private.
If you subscribe to Pro
Payment is handled by Stripe. We never see your card number: it goes straight to Stripe. We keep only the state of your subscription (plan, dates, status) and a transaction reference.
Recipe generation
When you use the fridge tool, the weekly menu or Kitchen SOS, the ingredients and preferences you type are sent to a language model provider to produce the answer. Your identity is not sent with them, and these requests are not used to build an advertising profile.
Cookies and measurement
A session cookie keeps you logged in. To understand the audience we use Google Analytics 4 and Microsoft Clarity. Clarity can record anonymized sessions (mouse movement, clicks) to spot where people get stuck; sensitive fields are masked. Nothing is used for advertising: ad storage stays off.
If you visit from the United States, measurement is on by default and you can turn it off at any time. Everywhere else, neither tool loads until you click Accept on the banner. Change your choice with the cookie settings link at the bottom of every page.
Error tracking and usage statistics
Sentry (Functional Software, Inc., San Francisco) catches JavaScript errors. It receives the error message, the page address, your browser and operating system, and a trimmed technical context. Sentry sets no cookie. Error data is kept 90 days.
Mixpanel (Mixpanel, Inc., San Francisco) measures aggregate use, such as page views. Before you consent, it stores no identifier and does not use your IP address. After you consent, it stores a random identifier in your browser's local storage and derives your approximate location from your IP address, which it does not keep.
Affiliate links
Some pages contain affiliate links, handled in part through Skimlinks. When you click one, the partner may set a cookie to attribute a commission. The price you pay does not change. Pages that carry these links say so.
Who we share with
We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We share it only with the providers the service needs: the web host, Stripe for payment, Google and Microsoft for measurement, Sentry and Mixpanel for errors and usage, the language model provider for generation, and the transactional email provider. Each gets only what it needs.
How long we keep it
- Account data: as long as the account exists, then deleted within 30 days of closing it.
- Billing records: 10 years, as accounting rules require.
- Analytics data: 14 months at most.
- Contact messages: 3 years after the last exchange.
Your rights
You can ask to see your data, correct it, delete it, limit or object to some uses, or get a copy of your account data. California residents have these rights under the CCPA, and we extend them to everyone. Write to bonjour@occasionalchef.com: we answer within a month and never treat you differently for asking. You can also delete your account yourself from your settings. If you are in the European Union, you can complain to your data protection authority.
Children
The service is not meant for children under 16, and we do not knowingly collect their data.
Security
Passwords are hashed, traffic is encrypted over HTTPS, and access to data is limited to the people who need it. If an incident affects your data, we will tell you within the time the law requires.
Changes
This policy changes when the service does. The date at the top is the one that counts. For a significant change, members get an email.