Privacy Policy
Effective date: February 22, 2026
Information We Collect
When you create an account, we collect your email address and name. When you save recipes, we store the recipe URLs, titles, and timestamps associated with your account.
The Shy Tomato browser extension scans each page you visit for Schema.org Recipe structured data. This scan is performed locally in your browser — no page content is transmitted unless you explicitly save a recipe. The extension stores authentication tokens and your clip history locally in your browser via chrome.storage.local. This data remains on your device unless transmitted during API calls to shytomato.com.
How We Use Your Information
- Authenticating your account and managing sessions
- Extracting and saving recipes from URLs you provide
- Displaying your clip history in the browser extension
Third-Party Services
We use the following third-party services to operate Shy Tomato:
- Google Gemini — recipe extraction via AI
- Modal — video processing
- Neon PostgreSQL — database storage
- Vercel — hosting, analytics, and speed insights
- Stripe — payment processing
- PostHog — product analytics
- Sentry — error monitoring
- Resend — transactional email
- OpenAI — text embedding generation for ingredient matching
- Cloudflare R2 — recipe source HTML storage
- Langfuse — LLM observability and tracing
- Inngest — background job orchestration
Browser Extension Local Storage
The Shy Tomato browser extension stores authentication tokens and clip history in chrome.storage.local. This data is not transmitted to any server except during authenticated API calls to shytomato.com.
Data Sharing
We do not sell your personal data. Third-party services listed above receive data only as necessary to operate the service on your behalf.
Your Rights
You may request deletion of your account or access to your personal data at any time by contacting us at the email address below.
Contact
For privacy-related inquiries, contact us at privacy@shytomato.com.