Cookies

Two first-party session cookies are used: myeat_session for administration and myeat_member_session for members. Both expire after 12 hours, are HttpOnly and SameSite Strict, and Secure in production. No analytics, profiling or third-party advertising scripts are enabled. Profile photos, public names, published recipes and scores are public. View counting uses a random identifier in session storage, with no third-party trackers.