Privacy policy

What we collect

Pantry Sub is an ingredient-substitution lookup. When you search for an ingredient, we log the query text, a normalized form of it, and basic metadata about the lookup (latency, whether it hit our cached answer set, and any filters you applied). Queries are not tied to an account because we do not have user accounts.

If you submit feedback on a substitute, we store the feedback along with an anonymous visitor ID generated in your browser. That ID is only used to prevent duplicate submissions and is not linked to any personal information.

Analytics and cookies

We use Google Analytics 4 to understand aggregate traffic: which pages are viewed, which substitutions people search for, and roughly where visitors come from. Analytics is loaded under Google’s Consent Mode v2 with all storage denied by default. If you accept cookies in the banner, Google Analytics stores a cookie in your browser so it can count you as a returning visitor. If you reject, Google still receives a cookieless ping so we have a rough traffic count, but no cookie is set and no identifiers persist.

We do not run advertising, retargeting, or third-party marketing pixels. Ad-related consent categories are always denied.

Rate limiting

To protect the service from abuse, requests that trigger new ingredient generation are rate-limited per IP address. We store a SHA-256 hash of the IP along with a timestamp — never the raw IP — and the hash is only used for the rolling 24-hour limit check.

Your choices

You can change your cookie decision at any time by clearing site data for this domain in your browser; the consent banner will reappear on your next visit. California residents may treat this as a “Do Not Sell or Share My Personal Information” notice — we do not sell or share personal information with third parties for advertising.

Contact

Questions about this policy? Email contact@islandandpine.com.