Privacy Policy — FoodNutritionLabelMaker.com
FoodNutritionLabelMaker.com is engineered to operate with minimal data collection. You can formulate recipes, scan allergens, and preview FDA labels with zero account signup.
1. Local-First Browser Storage (Recipe Drafts)
Active recipes, ingredient weights, serving sizes, and label format settings you edit in the Label Studio are automatically stored locally in your browser's localStorage so your work persists across page reloads without creating a user account. When you initiate paid checkout or unlock an export pass, a draft snapshot associated with your purchase ID is stored in Cloudflare D1 so your 90-day print pass or cross-device recovery code (FNLM-...) can restore your unlocked label.
2. Privacy-Preserving Product Funnel Telemetry
We record lightweight, first-party product workflow events (such as page views, template selections, proof downloads, and checkout initiation) in Cloudflare D1 (funnel_events) to measure conversion rates and improve label accuracy.
- We do not sell data to ad brokers or embed third-party behavioral advertising trackers.
- No raw IP addresses, passwords, or email addresses are recorded in funnel telemetry; only non-reversible SHA-256 salted session/visitor hashes and coarse country codes from Cloudflare edge headers are used for rate limiting and aggregate funnel counts.
- Automated search crawlers and bots are excluded from telemetry ingestion.
3. Turnstile-Protected User Feedback
If you voluntarily submit a bug report, compliance question, or feature request through our feedback dialog, your submission is protected by Cloudflare Turnstile anti-abuse verification and stored in Cloudflare D1 (user_feedback) alongside any optional contact email you choose to provide. We use optional contact emails solely to reply regarding your submitted issue.
4. USDA FoodData Central Lookup Proxy
Ingredient searches entered into the USDA lookup panel are proxied through our Cloudflare Workers endpoint (/api/usda/search) to the public USDA FoodData Central API and cached in Cloudflare KV (USDA_CACHE) for fast responses. Search queries contain ingredient food keywords only and are not tied to personal identities.
5. Payments, Tax Invoicing & Merchant of Record (Dodo Payments)
All paid purchases ($19 Single Label Print Pass, $24/mo Pro Unlimited, and $149/yr Pro Unlimited) are processed by Dodo Payments acting as our Merchant of Record. Payment card credentials, billing addresses, VAT/sales tax collection, and compliant global invoices are handled directly by Dodo Payments on their PCI-DSS compliant hosted checkout and Customer Portal. Our servers never receive or store your full credit card number.
When checkout completes, we issue an HttpOnly HMAC-SHA256 entitlement cookie (fda_entitlement_session) and a one-time cross-device recovery code (FNLM-...). Email addresses alone cannot unlock paid downloads.
Review our software usage and licensing obligations alongside this policy.