Privacy Policy

Last updated: 12 April 2026

Overview

Lazy Steven is a personal recipe storage application. We are committed to keeping things simple and transparent about how data is handled. This policy should be read alongside our Terms of Use.

Data We Store

  • Account data — your email address and display name, used for authentication and to identify you within shared cookbooks.
  • Session tokens — secure tokens stored in cookies to keep you logged in.
  • Recipes — titles, descriptions, ingredients, steps, nutrition information, tags, and notes that you create or add via the API.
  • Images — recipe images uploaded to the app are stored in Cloudflare R2.
  • AI usage logs — basic metadata (endpoint, timestamp) from AI feature usage, retained for abuse prevention and rate limiting.
  • Preferences — your theme preference (dark/light mode) is stored locally in your browser via localStorage. It is never sent to any server.

Data We Do Not Collect

  • No third-party tracking scripts or analytics
  • No advertising data or ad-related cookies
  • No location data
  • No payment information — Lazy Steven does not process payments

AI Features

Lazy Steven includes AI-powered features for recipe creation, suggestions, and nutrition estimation. These requests are processed by Cloudflare Workers AI.

  • Your prompts are sent to Cloudflare Workers AI for processing and are not stored after the response is generated.
  • AI usage is rate-limited. Basic usage metadata (endpoint, timestamp) is logged for abuse prevention.
  • No AI interaction content is sold or shared with third parties.
  • Cloudflare's data processing policies apply. See Cloudflare's Privacy Policy for details.

API Access

Lazy Steven provides a REST API and an MCP server for AI assistant integration. The API requires session authentication (login via the web app). Any data sent to the API (recipe content) is stored in the database as described above.

Hosting

This application is hosted on Cloudflare Pages with data stored in Cloudflare D1 (SQLite). Standard web server logs (IP address, user agent, timestamps) may be collected by Cloudflare as part of their infrastructure. These are subject to Cloudflare's Privacy Policy.

Your Rights

You can delete your account and all associated data at any time from Settings. If you have specific questions about your data or would like to request a copy, get in touch via the contact details below.

Changes

This privacy policy may be updated from time to time. The "last updated" date at the top of this page will reflect any changes.

Contact

If you have any questions about this privacy policy, you can reach us at [email protected].