Chrome Extension Privacy Policy

1. Overview

The PantryLink Chrome Extension ("Extension") allows you to save recipes and products from websites directly to your PantryLink account. This privacy policy explains what data the Extension collects, how it's used, and your rights regarding that data.

Our commitment: We collect the minimum data necessary to provide the Extension's functionality. We do not sell your data or use it for advertising purposes.

2. Data Collection

2.1 Data Collected When You Import

The following data is collected when you click an import button:

Recipe Data (when you click "Import Recipe")

Recipe name and description
Ingredients list
Cooking instructions
Prep time, cook time, and servings
Recipe image URL
Source URL (the page you imported from)
Cuisine type and tags/keywords

Product Data (when you click "Add Product")

Product name and brand
Product description
Price and currency
Product image URL
SKU/GTIN identifiers (if available)
Source URL (the page you imported from)

2.2 Automatic Product Data Collection

Important: When you are logged in, the Extension automatically sends product information to our servers when you visit pages that contain product data (Schema.org markup). This helps us build a product database to improve the service.

This automatic collection includes:

Product name, brand, and description
Price and availability
Product image URL
SKU/GTIN identifiers
The URL of the product page

This data is not added to your personal inventory or shopping lists—it is only used to improve our product database. You can disable this by logging out of the Extension.

Authentication Data

Authentication token (stored locally in your browser)
Your PantryLink user ID (for associating imports with your account)

2.3 What We Do NOT Collect

Full Browsing History: We do not track or store a list of all websites you visit
Non-Product Page Content: We only collect data from pages that have product Schema.org markup
Personal Information: We do not collect names, emails, or personal details through the Extension (only through your PantryLink account)
Financial Data: We do not collect payment information through the Extension
Location Data: We do not track your geographic location
Form Data: We do not collect data you enter into forms on websites

2.4 How Data Detection Works

The Extension looks for structured data (Schema.org JSON-LD) on web pages to detect recipes and products. This detection happens locally in your browser:

The Extension scans for recipe/product markup when you visit a page
Recipe data is only sent when you click "Import Recipe"
Product data with prices may be automatically sent to improve our database (when logged in)
If a recipe or product is found, a small button appears on the page

3. How We Use Your Data

Data collected through the Extension is used for:

Saving Recipes: Storing recipes you import to your PantryLink recipe collection
Saving Products: Adding products to your shopping lists or inventory
Building Product Database: Automatically collected product data helps us improve product recognition and suggestions for all users
Authentication: Verifying you're logged into your PantryLink account
Gamification: Awarding points/badges for using the Extension (if enabled in your account)

We do NOT use Extension data for:

Advertising or marketing purposes
Selling to third parties
Building user profiles for ad targeting
Any purpose unrelated to providing the PantryLink service

4. Data Storage and Security

4.1 Local Storage

The Extension stores minimal data locally in your browser:

Authentication token (encrypted)
Your API server URL preference

This data remains on your device and is cleared when you disconnect the Extension or clear browser data.

4.2 Server Storage

Imported recipes and products are stored on PantryLink servers:

Data is encrypted in transit (HTTPS/TLS)
Data is stored on secure AWS infrastructure
Access is restricted to your account only

4.3 Data Retention

Imported recipes/products: Retained until you delete them or your account
Authentication tokens: Expire after 30 days of inactivity
Deleted data: Permanently removed within 30 days

5. Data Sharing

We do not share, sell, or transfer Extension data to third parties, except:

Service Providers: AWS for hosting (data processing only, no access to content)
Legal Requirements: If required by law or valid legal process
With Your Consent: When you explicitly share recipes with other PantryLink users

6. Permissions Explained

The Extension requests the following Chrome permissions:

storage

Stores your authentication token and preferences locally in your browser.

activeTab

Allows reading the current page content when you click the Extension icon, to detect recipes and products.

scripting

Injects the recipe/product detection script and import button into web pages.

host_permissions (pantrylink.app)

Communicates with PantryLink servers to save imported data and verify authentication.

The Extension uses the <all_urls> content script permission because recipes and products can be found on any website. This does not mean we collect data from all websites—only from pages where you actively choose to import content.

7. Your Rights and Controls

7.1 Disconnect the Extension

You can disconnect your PantryLink account from the Extension at any time through:

The Extension popup menu → "Disconnect"
Your PantryLink account settings → Extension Tokens

This immediately revokes the Extension's access to your account.

7.2 Delete Imported Data

Delete individual recipes or products through the PantryLink web app
Delete your entire account to remove all associated data

7.3 Uninstall the Extension

Uninstalling the Extension removes all locally stored data. Previously imported recipes and products remain in your PantryLink account until you delete them.

8. Updates to This Policy

We may update this policy to reflect changes in our practices or for legal compliance. Changes will be posted on this page with an updated "Last updated" date. For significant changes, we may provide additional notice through the Extension or email.

9. Contact Us

If you have questions about this privacy policy or the Extension's data practices, please contact us through our contact form.