Privacy and safety

CookDex runs on your server and does not include telemetry or analytics.

• Credentials are stored locally and encrypted at rest.
• Session cookies are used only for authentication.
• Tasks run with a minimal environment instead of inheriting all host variables.
• Preview mode is the default for write-capable tasks.
• If AI categorization is enabled, only the recipe text needed for that task is sent to your configured provider.

The update check is the one request CookDex makes on its own; UPDATE_CHECK_ENABLED turns it off. See also CookDex privacy and how secrets are stored.