Effective 1 September 2026

Privacy policy

Potluck is a private place for collecting recipes from people you care about. This policy explains what we collect, why we use it, and the choices available to you.

Information we collect

We collect account details such as your name, email address, sign-in information, payment status, notification preference, and a Firebase installation identifier for browsers where you enable notifications. When a recipe book is created or a recipe is contributed, we store the book details, contributor name, recipe name, category, timings, servings, ingredients, method, optional note, and technical records needed to secure the service.

How we use information

We use this information to provide authentication, protected contribution links, recipe storage, book views, payments, fraud prevention, support, and service improvement. We do not sell personal information or use private recipe content for advertising.

Who can access a book

The book owner can access every recipe in their signed-in dashboard. A contributor with an active private link can see the book title, invitation note, and owner name, then submit a recipe without an account. Contributors cannot browse the existing recipes or access the owner dashboard. Anyone who receives the private link may be able to contribute, so it should be shared carefully. Owners can replace or disable it at any time.

Service providers

Potluck relies on trusted providers including Google Firebase and Google Cloud for authentication, hosting, database, messaging, and optional analytics; Stripe for payments; an email delivery provider for email-code sign-in; and, only with your permission, Meta and TikTok for advertising measurement. These providers process information under their own privacy and security obligations.

New recipe notifications

If you enable browser notifications, Potluck uses Firebase Cloud Messaging to alert you when a contribution arrives. Lock-screen alerts use generic wording and do not contain the contributor name or recipe contents. Turning notifications off in Settings removes the saved browser registrations.

Optional analytics and cookies

With your permission, Google Analytics for Firebase, Meta Pixel, and TikTok Pixel measure only the public acquisition funnel: homepage visit, onboarding start and completion, paywall view, checkout start, and purchase. We do not send names, email addresses, private-link tokens, recipe content, or dashboard activity to those services. Optional cookies stay disabled until you choose “Allow optional cookies” and can be withdrawn at any time.

Retention and deletion

We retain account and recipe content while providing the service or as needed for security, payment, and legal records. Owners can export their data, delete individual recipes or books, and delete the account from Settings. Limited payment or fraud-prevention records may be retained where required.

Your rights

Depending on where you live, you may have rights to access, correct, delete, restrict, object to, or receive a copy of your personal information. Signed-in users can contact us through Help & Feedback to exercise these rights.

Security and children

We use verified authentication, restricted database rules, protected contribution credentials, rate limits, and encrypted connections. No online service can guarantee absolute security. Potluck is not directed to children under 13, and a parent or guardian should supervise a minor’s contribution.