PantryM8 Privacy Policy

Information PantryM8 handles

Account and identity information: name, email address, password hash for Local accounts, account status, plan assignment, and linked authentication-provider identifiers. An external provider may supply a verified identifier, name and email address. PantryM8 does not store provider access or refresh tokens after authentication.
Household planning content: Items, Meals, Recipes, ingredient details, Planner entries, Shopping Lists, preferences, onboarding choices, images, notes and other content you enter.
Import and scanning content: receipt or recipe source material, uploaded images, extracted text, review decisions, private receipt aliases and related processing status.
Technical and security information: essential session records, remembered-sign-in tokens, password-reset tokens, authentication/security events, application diagnostics, email-delivery status and administrative audit information.
Community interaction: feature requests, optional submitter name/email, votes and an essential pseudonymous vote token used to prevent duplicate anonymous voting.

How the information is used

The operator uses this information to provide PantryM8's account, planning, shopping, recipe, import, communication and administration functions; authenticate users; preserve preferences; prevent abuse; diagnose failures; protect the service; and comply with applicable obligations.

PantryM8 does not include advertising trackers and does not sell personal information. An operator must separately disclose any analytics, hosting monitoring or other services they add outside PantryM8.

External services and disclosures

Information is shared only where needed for enabled functions or where the operator is legally required to disclose it. Depending on configuration and your actions:

Google or Microsoft processes authentication requests under its own privacy terms.
Google Cloud Vision may receive a temporary, size-optimised receipt image for OCR when that provider is enabled; local Tesseract processing stays on the PantryM8 host.
Open Food Facts or UPCitemdb may receive a barcode submitted for product lookup.
A recipe website receives a normal server request when you ask PantryM8 to import its URL.
The configured email and hosting providers process information needed to deliver messages and operate this installation.

Operators should select and configure these services according to their own legal and security requirements.

Cookies and local sessions

PantryM8 uses essential cookies for secure sessions, optional remembered sign-in when selected, and anonymous feature-request vote protection. It does not include advertising cookies. Your browser can remove cookies, but doing so may sign you out or reset anonymous voting recognition.

Retention, access and deletion

Information is retained in the operator's database and storage for as long as the account or operational record is needed. Security, delivery and release records may be retained for integrity and audit purposes. Administrators can remove an account and its user-owned PantryM8 data; backups and legally required records may persist for the operator's documented retention period.

To request access, correction, export, restriction or deletion, contact the operator of this PantryM8 installation. Available rights depend on your location. PantryM8 does not provide a central service operator that can access a separately hosted installation.

Security and international processing

PantryM8 uses password hashing, encrypted managed secrets, scoped authentication, CSRF protection and bounded session tokens. No internet service can guarantee absolute security. Information may be processed in the countries where the operator and its selected hosting, authentication, OCR or email providers operate.

Children and household information

PantryM8 is a household planning service and is not designed for children to create accounts independently. An account holder may enter household-related content and is responsible for having authority to provide it.

Changes and contact

The operator may update this policy as PantryM8, its configuration or legal obligations change. The effective date above identifies this version. Questions and privacy requests should be directed to the operator or administrator of this installation.