Privacy policy

1.Who we are

Sprig is operated by William Diggs, a sole proprietor doing business as Sprig Vegan Cookbook.

Day to day it is run by two people: William and his wife Tiffany. There is no team behind us and no third party handling your data on our behalf beyond the services named below.

If you have any question about your data, email sprig.vegancookbook@gmail.com and it will reach a person.

2.What we collect

We collect as little as we can get away with. In full, that is:

• Your email address and password, when you create an account. Passwords are stored hashed by our authentication provider — we never see them and cannot recover them, which is why a reset link is the only way back in.
• Your subscription status, your Stripe customer reference, and when your current period ends. This is what unlocks paid content.
• The recipes you save as favorites.
• If you are signed in: the recipes on your list and the servings you chose, which day and meal you assigned each one to, and any items you typed onto your grocery list yourself. This is what lets a week you planned on a laptop appear on your phone.
• Ordinary server logs, which include IP addresses, as a side effect of running a website.

3.Your list, your plan, and your devices

If you are not signed in, all of it stays in your browser: the recipes on your list, the servings, the day and meal you give each one, and anything you type onto the list yourself. None of it reaches us, none of it is linked to anything, and clearing your browser data clears it.

If you are signed in, those things are saved against your account so that a week you planned on a laptop is waiting on your phone. That includes any grocery items you typed in yourself, which are the only free text we store. They are readable only by you, and they are deleted with your account.

A few small things stay in your browser either way and are never sent to us: whether you prefer US or metric units, which items you have ticked off while shopping, whether you have switched off the scrolling ticker at the foot of the page, and whether we have already shown you our invitation to create a free account. A tick is about where you are standing in a shop, not about who you are.

Separately, when your browser asks our server for the ingredients of the recipes on your list, we receive those recipe names in order to answer. We do not store that request.

4.Payments

Payments are handled entirely by Stripe. Card numbers are entered on Stripe's own checkout page and never pass through our code — we could not store your card details if we wanted to.

We receive from Stripe only what we need to know that you are subscribed: a customer reference, your status, and your period end date. Stripe processes your payment information under its own privacy policy.

5.Cookies

We use cookies only to keep you signed in. There are no advertising cookies, no tracking pixels, and no third-party marketing scripts on this site.

6.Analytics

We use Vercel Web Analytics to count how many people visit each page. It does not use cookies and does not follow you to other websites. To count a visitor only once a day it derives a temporary anonymous identifier from your request, which is discarded within twenty-four hours and is never linked to your account.

We also record a small number of events about what happens on the site: when someone starts a cook-along and which recipe it was, when someone starts sharing a grocery list, and which parts of the free demo people try. These tell us whether the things we built are actually used, which is the main thing we want to learn.

Each of those records an action and, at most, a recipe name. None of them records anything about you, and the link that shares a grocery list is deliberately never included, because anyone holding it could read that list.

We also use Vercel Speed Insights, from the same company and on the same terms, to measure how quickly pages actually load for real visitors. It records the timing, which page it was, and general details such as browser and country. It sets no cookies and records nothing that identifies you.

We do not use analytics to build a profile of you, and we do not share this data with anyone for advertising.

7.Who we share data with

We do not sell your data, and we do not share it for advertising. We use these providers to run the service:

• Supabase — accounts, database and file storage.
• Stripe — payments and subscription billing.
• Vercel — website hosting, and the cookieless page analytics and performance timings described above.
• Our email provider — sending account emails such as confirmation and password resets.

8.Email we send you

We send account emails: confirming your address, resetting your password, and messages about your subscription. These are part of the service and you cannot unsubscribe from them while you have an account.

We do not send marketing email unless you have asked for it separately.

9.Where data is held, and for how long

Our providers store data on servers in the United States.

We keep your account data while your account exists. If you ask us to delete your account we will delete it, your favorites, and your saved list and plan. We keep records of payments for as long as tax and accounting rules require, which is a legal obligation rather than a choice.

10.Your choices

You can cancel your subscription at any time from your account page.

You can ask us to correct your email address, tell you what we hold about you, or delete your account entirely by emailing sprig.vegancookbook@gmail.com. There is no self-service delete button yet, so a person will do it and confirm when it is done.

Depending on where you live you may have additional rights over your data. Ask and we will honor them.

11.Children

Sprig is not directed at children under 13 and we do not knowingly collect their information. If you believe a child has created an account, email us and we will remove it.

12.Changes to this policy

If we change what we collect or who we share it with, we will update this page and change the date at the top. Material changes will be announced by email or in the app.