ReciHop Privacy Policy

Effective date: 1 October 2026

ReciHop is a Chrome extension that reads a recipe from the page you are viewing, converts it into a recipe draft and fills the Monsieur Cuisine recipe form with it. This policy explains what data ReciHop handles, why, where it goes and how long it is kept.

ReciHop is an independent product. It is not affiliated with or endorsed by the operators of the recipe websites or of Monsieur Cuisine.

Controller

The controller of personal data processed by the ReciHop backend is ReciHop. Contact: contact@recihop.com.

What the extension reads

ReciHop reads a page only after you click the ReciHop icon and then "Read recipe", and only in the tab you are viewing. It reads:

• the recipe data the page publishes for search engines (Schema.org recipe data) and the page language;
• on Cookidoo recipe pages, also the ingredient list, the difficulty and the identifiers of the devices and accessories the recipe needs. It does not read your private notes.

If a page has no recipe data, you can paste recipe text into the side panel yourself. When the side panel shows a recipe with a photo, your browser loads the photo from the website that hosts it.

ReciHop does not read other tabs, your browsing history, cookies or passwords, and it does not read pages in the background.

Data kept in your browser

• Recipe drafts: up to five drafts are stored in the extension's local storage, so you can use them later. You can delete them one by one or all at once in the side panel. Uninstalling the extension deletes them.
• Sign-in session: your Google ID token, email address and Google account identifier are kept in the extension's session storage, which the browser clears when it closes. Signing out removes them.
• Running conversion: while a conversion runs, a copy of the request is kept in session storage, so an interrupted conversion can be finished without a second charge.

Sign-in with Google

Converting a recipe requires an account, so that credits can be counted. ReciHop uses Google sign-in and asks only for your basic identity and email address (openid email). We receive your Google account identifier and email address. We do not receive your Google password or access to other Google data.

What is sent to the ReciHop backend

When you click "Convert", the extension sends the recipe to the ReciHop backend to convert it:

• for a recipe read from a page: title, yield, times, ingredients, steps, categories, difficulty, nutrition, language, the address of the recipe image and, for Cookidoo recipes, the device and accessory identifiers;
• for pasted text: the text and the language you chose.

The page address, the page's HTML, the image itself, cookies and passwords are not sent. The backend never fetches web pages.

Each request also carries your Google ID token, which the backend uses to identify your account.

Conversion and OpenAI

Recipes from Cookidoo are converted on the ReciHop backend by fixed rules. They are not sent to OpenAI or any other AI provider.

Recipes from other websites and pasted text are converted with an AI model from OpenAI. The backend sends OpenAI the recipe fields listed above, without the image address and device identifiers, or the pasted text. It also sends a pseudonymous identifier derived from your account by a one-way hash, which OpenAI uses to detect abuse. It does not send your name or email address. Requests are made with response storage turned off. OpenAI's handling of this data is described in its API data usage policies.

Monsieur Cuisine form

The form is filled in your browser, in the Monsieur Cuisine recipe form you opened. ReciHop never saves the recipe; you decide whether to save it. If the draft has a recipe image, the extension asks for permission to the image's website and downloads the image in your browser to add it to the form. ReciHop does not send your data to Monsieur Cuisine. What you save there is governed by the Monsieur Cuisine privacy policy.

What the backend stores

• Recipe content is used only to produce your draft. It is not stored in the database and not logged. The finished draft is kept in server memory for 10 minutes, so an interrupted conversion can be completed without a second charge, and is then discarded.
• Account data: your Google account identifier, email address, credit balance, account creation date and a history of credit operations (grants, conversions, refunds) with timestamps. Each conversion record also holds technical usage data: the conversion method or model, the OpenAI processing tier, token counts and duration.
• Server logs: technical data about each request and conversion, such as time, path, status, internal account number, recipe language and source type, model, token counts and error type. Logs do not contain recipe content or your email address. Logs are kept for 30 days.
• Backups: the account database is copied daily to the same server, and the last seven copies are kept.

Service providers

• Google: sign-in.
• OpenAI: conversion of recipes from sources other than Cookidoo and of pasted text. OpenAI may process data outside the European Union, including in the United States.
• Cloudflare: network connection to the backend and hosting of the recihop.com website. It processes connection data such as your IP address.
• OVH: server hosting in the European Union.

We do not sell your data, do not use it for advertising and do not use analytics or tracking.

Payments

Credits cannot be purchased yet. Before purchases become available, this section will describe the payment provider, the data it processes and the purchase records kept by ReciHop.

Legal bases

We process account, credit and recipe data to provide the conversion you request (Article 6(1)(b) GDPR). We keep logs and backups to keep the service secure and working (Article 6(1)(f) GDPR, our legitimate interest).

Retention and deletion

Account data is kept while your account exists. To delete your account, write to contact@recihop.com; we delete it without undue delay and within one month. Deleted data remains in backups until they are replaced, at most seven days. Data in your browser stays under your control and is deleted as described above.

Your rights

You have the right to access, correct and delete your personal data, to receive it in a portable format, and to restrict or object to its processing. To use these rights, write to contact@recihop.com. You also have the right to lodge a complaint with a data protection supervisory authority, in Poland the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych).

Limited Use

The use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. The use of data collected by the extension adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements.

Changes

We will update this policy when ReciHop's data handling changes and change the effective date above.