Privacy Policy
Effective date: August 2025
Allacart (“we”, “us”) operates allacart.app. This policy explains what data we collect, why, and how we handle it.
What we collect
- Account information — your email address and a hashed password, used to sign you in.
- Content you create — recipes, meal plans, and shopping lists. This is your data; we store it so the app works.
- Recipe images — when you import a recipe with an image, we store a copy on Vercel Blob so it loads reliably.
- Analytics — if you accept cookies, we use PostHog to understand how people use Allacart (page views, feature usage). PostHog data is hosted in the EU (eu.posthog.com). If you decline cookies, PostHog counts you anonymously using a privacy-preserving server-side hash — no personal data is stored in your browser.
- Session cookie — a single httpOnly cookie called
allacart keeps you signed in. It contains no personal data beyond a session identifier.
How we use your data
- To provide and improve Allacart.
- To keep your account secure.
- To understand usage patterns and fix bugs (analytics).
We do not sell your data. We do not run ads.
Where your data lives
- Database — Neon (Postgres), hosted in the EU.
- Images — Vercel Blob.
- Analytics — PostHog EU (eu.posthog.com).
Third parties
We share data only with the services listed above (Neon, Vercel, PostHog) to operate Allacart. We do not share data with anyone else.
Your rights
You can ask us to export or delete your data at any time by emailing legal@allacart.app.
Cookies
On your first visit we ask whether you accept analytics cookies. You can change your choice at any time by clearing your browser’s cookies for allacart.app and reloading the page. The session cookie is always set when you sign in — it’s essential for the app to work.
Changes
We may update this policy as Allacart evolves. We’ll note the new effective date at the top when we do.
Contact
Questions? Email legal@allacart.app.