Privacy, without vague promises

No account profile

You can browse, search, and build a plate without creating an account or giving CaloriePlate your name, email, or payment details.

Saved on your device

Recent food IDs and Make Your Own ingredients, weights, states, and serving count are stored in your browser's local storage.

Conditional analytics

Vercel Web Analytics runs on Vercel deployments. Google Analytics 4 runs only when a valid GA4 measurement ID is configured.

Email is voluntary

CaloriePlate receives your address and message only when you choose to send an email.

CaloriePlate uses local storage for two product features. The search interface keeps up to six recently viewed food identifiers under cp:recent. The plate builder stores selected food IDs, forms, preparation states, gram weights, and serving count under calorieplate:make-your-own:v2.5.

This information remains on that browser and device until you clear it, clear site data, use the product's clear control where available, or browser policy removes it. CaloriePlate does not sync it to a user account.

Search text is evaluated in the browser against the public catalog; the application does not submit typed search terms to a CaloriePlate search service. Normal hosting and analytics requests can still record the page you visit as described below.

The providers below process technical information under their own policies. Which measurement tools run depends on the deployment configuration.

Vercel hosting

Page requests necessarily provide Vercel with technical request data such as an IP address, requested path, timestamp, browser or user-agent information, and security or delivery signals. Vercel processes this information to deliver, protect, and operate the hosted site. See Vercel's Privacy Notice.

Vercel Web Analytics

On Vercel deployments, the installed analytics component records default page views, navigation, and allowlisted product events. Vercel documents data points such as path, route, referrer, filtered query parameters, coarse location, browser, operating system, and device type. Vercel says these data points are anonymous and aggregated, are not tied to an individual or stored IP address, and use a request-derived visitor hash whose session is discarded after 24 hours. CaloriePlate's custom events contain only the coarse fields described below. See Vercel's Web Analytics privacy documentation.

Google Analytics 4

When a valid measurement ID is configured, the Google tag loads after the page becomes interactive. A default GA4 implementation can collect page views, user and session counts, engagement events, approximate geolocation, and browser and device information. GA4 uses first-party identifiers to distinguish visitors and sessions. CaloriePlate disables Google Signals and ad-personalization signals in its GA4 configuration and sends the same allowlisted product-event fields described below. Google says IP addresses are used at collection time for location information and discarded before the data is logged. Read Google's GA4 data-collection summary and Privacy Policy.

CaloriePlate uses these measurements to understand traffic, page use, device compatibility, and where the site needs improvement. Product events do not include names, email addresses, typed search text, food names or identifiers, exact serving inputs, exact weights, ingredients, or saved plate contents.

When the applicable analytics provider is available, CaloriePlate can record that a search was opened, the search result-count band, or that a canonical result was selected. A selection event includes only the product surface, a context such as search results or recent items, and a coarse position band. It does not identify the query or selected food.

Nutrition and builder events can record that a variant, preparation, or serving control was used. Their fields are limited to an option-count band, control type, and a quantity category such as fractional, single, multiple, or custom. Exact selections and measurements are excluded.

Ingredient-add and plate-completion events contain only a selection-path category, a coarse plate-size band, and whether the plate uses servings only or includes a custom weight. Food names, food IDs, preparation keys, ingredient lists, nutrition totals, and locally saved plate contents are not analytics event fields. A runtime allowlist removes unexpected event fields or values before either provider receives them.

Normal page-view measurement can still include the public URL path of the page visited, as described in the provider summaries above. Search text stays in the browser and is never added to a URL by the search interface.

When GA4 is enabled, its JavaScript can set first-party cookies named _ga and _ga_<container-id> to distinguish visitors and preserve session state. Google documents a default expiration of two years, subject to browser limits and the property's configuration. Read Google's GA4 cookie documentation.

Vercel describes Web Analytics as operating without third-party cookies and using a short-lived request-derived hash for visitor identification. Local storage used by CaloriePlate is browser storage, not a cookie.

• Delete or block cookies and local storage in your browser settings.
• Use Google's official Analytics opt-out browser add-on.
• Use a browser privacy control or content blocker that limits analytics requests.
• Clear the saved plate in Make Your Own and clear recent foods from the search interface.

Blocking storage may prevent recent-food and plate-builder preferences from persisting, but the core public nutrition pages remain available.

If you contact CaloriePlate, the message can include your email address, display name, message content, attachments, and delivery metadata. It is used to respond, investigate a correction, handle a rights or licensing request, protect the site, or retain an appropriate record of a material data decision.

Do not send medical records, account passwords, payment-card data, or other sensitive information that is not necessary for the request. Email is handled by the sender's and recipient's email providers as well as CaloriePlate.

Information is used to deliver and secure the site, preserve local product preferences, understand aggregate use, answer messages, review corrections, and comply with legal obligations. It may be disclosed to hosting, analytics, and email providers for those purposes, or when reasonably necessary to comply with law, protect rights and safety, or investigate abuse.

Local-storage data lasts until it is cleared or removed by browser policy. Contact messages are kept only as long as reasonably useful for the request, correction record, security, or legal obligation. Analytics retention is controlled by the applicable Google and Vercel service settings and policies; CaloriePlate does not promise a fixed provider retention period that cannot be verified from this site.

Providers may process information in countries other than your own. Their notices describe their transfer and processing practices.

Depending on where you live, you may have rights to ask about, access, correct, delete, restrict, or object to certain processing of personal information. Because CaloriePlate has no user accounts and much of its measurement is aggregate, there may be little or no information that can be linked back to you.

Send a privacy request to bineyamtsegaye1@gmail.com. Include your location, the right you want to exercise, and enough context to find the relevant email or interaction. CaloriePlate may need to verify the request before acting on it. You may also need to contact Google or Vercel directly for data they control under their own policies.

CaloriePlate is a general-audience nutrition reference and is not directed to collecting personal information from children. It does not knowingly create profiles for children. A parent or guardian who believes a child sent personal information can use the contact address above.

Reasonable technical and organizational measures are used for the information CaloriePlate controls, but no website, provider, or email channel can guarantee absolute security.

This policy may change when the site's data practices, providers, or legal obligations change. A revised policy will appear at this canonical URL with a new effective date. Questions can also be sent through the contact page.