Privacy Policy
Last updated: March 2026
What we collect
Quartermaster collects the minimum data needed to provide the service: your email address, username, and password (hashed) for authentication, plus the recipes, Pantry items, and meal plans you create.
How we use your data
Your data is used solely to provide and improve the Quartermaster service. We use PostHog for product analytics to understand how features are used and to fix bugs. We do not sell your data or use it for advertising.
Analytics and session replay
Quartermaster uses PostHog to capture anonymous pageviews, clicks, and session recordings (DOM snapshots — visible page text is recorded, but form input values are masked by default). This helps us understand usage patterns and diagnose issues. You can opt out at any time by running posthog.opt_out_capturing() in your browser console.
Data storage
Your data is stored in a SQLite database hosted on Fly.io infrastructure. Recipe images are stored in S3-compatible object storage. All connections use HTTPS encryption in transit.
Cookies
We use a single httpOnly session cookie for authentication and a theme preference cookie. PostHog sets an analytics cookie for identified users (only created after you log in, per our person_profiles: 'identified_only' configuration). We do not use advertising cookies.
Data export and deletion
You can export all your data (recipes, Pantry, meal plans, shopping lists) as JSON at any time. Go to Settings > Profile to manage your account.
Changes
We may update this policy as the service evolves. Significant changes will be communicated through the app.