Privacy notice
Last updated 16 September 2026
Cook Me Anything is operated by Arrun Padda. This notice explains what happens to information when you use cookmeanything.co.uk.
Who is responsible
Arrun Padda, operating Cook Me Anything, is the controller of information handled directly by this service. Contact: hello@cookmeanything.co.uk.
What we process
- Kitchen photos: sent temporarily through our server to OpenAI so ingredients can be identified. Cook Me Anything does not save the photos to its database or filesystem.
- Ingredients and choices: the ingredient list, cuisine, effort, adventure, shopping choice and serving count are processed to create recipes.
- Feedback: recipe name, thumbs-up/down choice, cooked status, rating and cooking preferences may be stored when you submit feedback.
- Usage and security information: a one-way hashed version of the visitor IP address and daily action count are stored to enforce fair-use limits. Hosting providers may also create ordinary technical and security logs.
- Website analytics: Cloudflare Web Analytics receives limited page-load and performance information so we can understand aggregate use and improve reliability. Cloudflare states that it collects the minimum information required and does not track individual visitors across its customers’ websites.
- Browser storage: a random feedback identifier and your saved feedback choices are kept in your browser. You can remove them by clearing site data.
Why we use it
We process information to provide the ingredient-analysis and recipe service you request, protect the service from misuse, control costs, diagnose problems and improve recipe quality. Our legal bases are performing the service requested by you and our legitimate interests in operating, securing and improving it.
Service providers and international transfers
Render hosts the website and database. Cloudflare Turnstile processes limited browser, device and network information to distinguish people from automated abuse, and Cloudflare Web Analytics provides aggregate website-performance information. OpenAI processes photo, ingredient and preference inputs to produce results. These providers may process information outside the UK using their contractual and legal transfer safeguards. OpenAI states that API data is not used to train its models by default. OpenAI may retain API content for up to 30 days for abuse monitoring and service operation unless a different eligible data-control arrangement applies.
How long we keep information
Cook Me Anything does not retain uploaded photos. Feedback records are automatically removed after 12 months. Hashed usage-limit records are removed after 31 days. Browser data remains until you clear it. Technical logs are retained according to the hosting provider’s settings and operational requirements.
Your rights
UK data-protection law may give you rights to access, correct, erase or restrict your information, object to some processing, and complain to the Information Commissioner’s Office. Because the browser identifier and IP usage identifier are pseudonymous, we may need information from you to locate a record.
Contact hello@cookmeanything.co.uk. You can also visit the ICO complaints page.