Privacy Policy

Last updated: March 2026

Skillet ("Skillet," "we," "us," or "our") operates the recipe development platform at https://skillet.studio. This Privacy Policy explains what information we collect, how we use it, and the choices you have.

We've written this policy to be genuinely readable. If something is unclear, email us at support@skillet.studio and we'll explain it in plain language.

What We Collect

When You Create an Account

Email address — to identify your account and send essential communications
Display name — shown within the app (optional)
Password — stored using bcrypt hashing; we never see or store your plain-text password
Profile image — optional

If you sign in with Google, we receive your name, email, and profile photo from Google's OAuth flow. We never receive your Google password.

When You Use Skillet

We store the content you create:

Recipes and all their versions, ingredients, steps, and notes
Cook logs and session observations
AI recipe generations and refinement sessions
Images you upload or select
Menus, skill tracking progress, and culinary journeys

Automatically Collected

We collect minimal technical data to keep the service running:

Pages visited and features used (for performance monitoring)
Browser type and device category
IP address (for security and abuse prevention)
Timestamps of activity

We do not fingerprint your device or build advertising profiles.

Cookies

We use only essential and functional cookies. No third-party trackers, no retargeting pixels. See our Cookie Policy for the full details.

How We Use Your Information

Operate the service — store and display your recipes, sync your workspace
Power AI features — process content you submit to AI tools (see our AI Policy)
Improve Skillet — understand which features are used and where issues occur
Communicate with you — account verification, password resets, significant policy changes
Protect the platform — prevent abuse, enforce our terms

We do not sell, rent, or share your personal information with advertisers. We never will.

Third-Party Services

Skillet relies on a small number of external services:

Service	Purpose	What's Shared
Google OAuth	Optional sign-in	Auth tokens only (when you choose Google sign-in)
OpenAI	AI recipe features	Recipe content you submit to AI features (see AI Policy)
Unsplash / Pexels	Stock recipe imagery	Search queries only
Cloud infrastructure	Hosting & storage	Your data, encrypted in transit and at rest

Each provider operates under their own privacy policy. We share only what each service needs to function.

Data Storage & Security

Your data lives on encrypted, access-controlled servers. All connections use TLS. Passwords are hashed with bcrypt. Database connections are not publicly accessible.

No system is perfectly secure. We take reasonable precautions and encourage you to use a strong, unique password. See our Security page for more detail.

Your Rights

You can:

Access your data through your Skillet account at any time
Export your recipes and content
Correct your personal information in account settings
Delete your account and all associated data — see Data Deletion

If you're in the EU, UK, or California, you may have additional rights under GDPR or CCPA. Contact support@skillet.studio and we'll honor reasonable requests regardless of jurisdiction.

Children

Skillet is not designed for children under 13. We do not knowingly collect information from anyone under 13. If you believe a child has created an account, please contact us at support@skillet.studio and we'll remove it promptly.

Changes to This Policy

We'll update this policy as Skillet evolves. For significant changes, we'll notify you by email or through a notice in the app. Minor clarifications won't trigger a notification, but the "Last updated" date above will always reflect the latest revision.

Questions

If anything here is unclear, we'd rather explain it than hide behind it. Reach us at support@skillet.studio.