YOUR SPACE

Your data belongs in your kitchen.

WitchFeast stores your account email, saved recipes, meal calendar, and shopping lists to provide the app. These are private to your account unless you invite a shared user or choose to make a recipe public. Site administrators can access records when operating and maintaining the service.

Shared kitchens

An Enchanted owner can invite one person to use their recipes, personal recipe notes, meal calendar and shopping lists. Both people can change or delete shared content, and imports use the owner's allowance. Each person keeps their own login and preferences. The owner can see the invited user's display name and email to manage sharing; billing and payment settings remain available only to the owner. Invitations are sent through our account email system. Ending sharing leaves the invited user with an empty Free account, while all shared content stays with the owner. We retain the membership record while the invited account exists to enforce the rule that it cannot join a shared account again. Deleting a shared user's login does not delete the owner's shared content. Deleting the owner's account removes that content and ends shared access.

Public recipes

Recipes start private. If you make a recipe public, Enchanted members can find its recipe details, photo, tags, source attribution, and your display name, and save independent copies to their own grimoires. Your personal notes and account email are not shared. Making a recipe private, archiving it, or deleting it removes it from public discovery. Copies others already saved remain theirs, including their copied photos, even if you delete the original recipe or your account. Access to these public copies requires Enchanted.

Accounts and security

Passwords are stored as one-way hashes. Account emails are used for confirmation, password recovery, and security notices. Essential session cookies keep you signed in. Cloudflare Turnstile processes verification information when enabled to help prevent automated abuse.

Site analytics

We use Google Analytics to understand website traffic and feature usage. Google processes usage and device information and uses analytics cookies. Our page-view reports use generic page names rather than recipe titles, record identifiers or URL query strings. Account-security pages and staff tools do not load analytics.

Product measurement

We record daily account activity such as saving recipes, planning meals, using shopping lists, cooking, and subscription changes to understand whether WitchFeast is useful. These first-party records contain event types and dates, not recipe text, photos, search terms, URLs or account fields. Import cost records contain provider models, token counts and estimated costs. Activity records are kept for 13 months and are removed when you delete your account.

Recipe imports

When you import a URL, WitchFeast first requests the public website and reads its recipe data. If that fails or the data is incomplete, your recipe link is sent to OpenAI to try browsing the page and extracting the recipe. We request that API responses not be stored; OpenAI processes requests under its API data policies. The source website receives retrieval requests, and WitchFeast may request the recipe image. WitchFeast retains the source link, attribution, and import provenance with your private copy, including an AI label when AI was used. You can review and correct the extracted draft before saving.

When you choose AI photo import, your recipe photos are sent to OpenAI for transcription. WitchFeast removes image metadata before sending, requests that the API response not be stored, and does not retain your uploaded source photos. OpenAI processes the request under its API data policies. Extracted drafts are available for one hour and then removed by scheduled cleanup. Saved recipes keep an AI import label and provenance information, including the provider, model, import date, and photo count.

Subscriptions and payments

PayPal processes subscription payments. WitchFeast stores subscription and payment references, amounts, billing dates, and import usage to provide paid access and handle payment updates. We do not store your card details. Your own recipes and website/photo imports stay usable on Free. Saved public recipes are greyed out until you upgrade to Enchanted. Public recipe copies remain stored when Enchanted access ends and unlock again when it returns.

Deletion and retention

You can delete recipes, lists, and your account in the app. Account deletion removes your recipes, meal history, shopping lists, and images. Billing transaction references, amounts, and dates are retained for payment reconciliation with the account link removed. Deleted data may remain in restricted operational backups for up to 30 days.

Questions about your data? Contact the site administrator.

Updated October 2026.