Privacy Policy

Last updated: October 18, 2026

CardToCookbook (cardtocookbook.com, “we”, “us”) turns photos of handwritten recipe cards into a printable PDF cookbook. This policy explains what data that involves, where it goes and how long it is kept. Questions: support@cardtocookbook.com.

The short version

1. Recipe card photos and recipes

When you add photos, they are resized in your browser and saved in your browser’s local storage (IndexedDB) together with the transcribed recipes, your edits and your book settings. The PDF is also generated in your browser. This data stays on your device until you delete it (for example by clearing site data in your browser); we cannot see, recover or delete it for you.

To transcribe a card, the resized photo is sent to our server, which forwards it to an AI text-recognition service and returns the result to you. We do not store the photo or the transcription on our servers, and we do not log their content. We currently use OpenRouter, which routes the request to one of the AI model providers it works with; we may also use Google’s Gemini API. These services process the image under their own terms and may keep request data for a limited time for abuse monitoring, and some free model providers may use submitted content to improve their models. Please don’t upload photos that contain information you don’t want shared (for example addresses, phone numbers or other people’s private notes written on a card).

2. Purchases

Payments are handled by Creem, which acts as the Merchant of Record: Creem processes your card or other payment details, charges any sales tax/VAT and issues the receipt. We never see or store your full payment details. Creem shares with us, and we keep, an order record so we can unlock your book and help you later: our internal order id, the Creem order and checkout ids, the plan you bought, the amount and currency, your email address, the payment status (paid, refunded, disputed) and timestamps. We keep order records for as long as needed for accounting, tax and dispute purposes (generally up to 7 years), then delete them.

Your browser remembers only a random order id so that it can ask our server whether the book is unlocked. You can restore a purchase on another device with your email and the order number from your Creem receipt.

3. Technical data

The site is hosted on Cloudflare. Like any web server, it processes your IP address and basic request information to deliver pages, protect against abuse and enforce usage limits (for example how many cards one network can transcribe per day). We keep these counters only in short-lived memory and do not build profiles. Cloudflare may keep standard security logs under its own policy.

4. Emails

If you email support@cardtocookbook.com, we use your message and address only to answer you and keep the conversation for up to two years. We don’t send marketing emails.

5. Legal bases and your rights

We process order data to perform our contract with you and to meet legal obligations, and technical data on the basis of our legitimate interest in running a secure service. Depending on where you live (for example under the GDPR, UK GDPR or California law), you may have the right to access, correct, delete or export your personal data, to object to or restrict processing, and to complain to a data protection authority. Email support@cardtocookbook.com and we will reply within 30 days. We do not sell or “share” personal information as those terms are defined under California law.

6. Children

The service is not directed to children under 13 (or under 16 in the EEA/UK), and we do not knowingly collect their data.

7. International transfers

Our service providers (Cloudflare, Creem, OpenRouter and the AI model providers it uses) may process data in the United States, the European Union and other countries. They rely on appropriate safeguards such as standard contractual clauses where required.

8. Changes

If we change this policy we will update the date above; for significant changes we will add a notice on the site.