Privacy
What this notice covers
This notice describes the current Dbara web app at dbara.app. Updated 20 September 2026.
What is saved
Dbara stores the ingredient names and notes you add, your shopping checklist, recipe preferences and a revision number in its server database. Avoid putting sensitive information into ingredient notes.
Optional photo recognition
Choosing Analyze sends a resized photo through Dbara to the OpenAI API to identify visible ingredients. Dbara does not store photos or model responses, and photo dialogs are excluded from analytics replay. Only confirmed ingredient names are saved. OpenAI processes the photo under its API data policies; API data is not used for training by default and may be retained in abuse-monitoring logs for up to 30 days, subject to policy exceptions. Dbara requests no response storage. Daily scan counters keyed to your pseudonymous kitchen identity are retained for up to seven days to limit costs and misuse.
How your kitchen is identified
No Dbara account is required. A necessary, secure browser cookie identifies a guest kitchen; its random identifier is hashed before it is used as a database key. The cookie can last up to one year. If the hosting platform supplies an authenticated identity, the kitchen is associated with that user ID instead. Dbara does not store the supplied name or email in its kitchen table.
Browser storage is not the pantry database
Your language choice is stored in this browser. Your pantry is stored on the server, not only on your device. Clearing cookies can remove access to a guest kitchen without deleting its server record. Use the deletion control before clearing cookies.
Optional voice input
Voice starts only when you choose Start speaking and allow the browser permission. Your browser or device speech provider may process audio remotely under its own terms. Dbara does not receive or store audio recordings on its server. Recognized text stays in the open page; only ingredient names you confirm are saved when you add them. Voice is optional; manual entry works without it.
Why the data is used
Saved data lets Dbara restore your kitchen, match ingredient names with recipes, remember preferences and maintain your shopping checklist. Matching happens in the app; it is not sent to a generative AI recipe service.
Service providers and links
The current app is hosted using OpenAI Sites with Cloudflare infrastructure and a Cloudflare D1 database. Hosting providers handle network requests and may retain operational or security logs under their own policies. Recipe-source and photo-credit links open external websites with their own privacy practices. Browser speech processing is separate from Dbara hosting.
Advertising and analytics
With your permission, Dbara uses PostHog Cloud in the United States to measure visits, referring sites, campaign tags, device/browser details, approximate location derived from your IP address, and actions such as adding ingredients or opening recipes. PostHog receives network requests and uses a random browser identifier to recognize return visits; Dbara does not send your account identity. A 20% sample of eligible consenting sessions can be replayed to understand navigation. Inputs, pantry details and voice dialogs are masked or excluded, and network bodies and console logs are not recorded. Dbara does not send microphone audio, transcripts, notes or ingredient lists to analytics. No advertising SDK is installed.
Analytics choices
Analytics stay off until you allow them. Your choice is stored in this browser for 180 days; you can change it through Analytics choices at any time. Do Not Track and Global Privacy Control keep analytics off. Declining stops further collection and disables PostHog browser persistence; Dbara remains usable. Previously transmitted events and replays are not deleted by changing this choice or deleting your kitchen. Their retention is controlled by the PostHog project settings.
Retention and deletion
Saved kitchen records remain until deleted; Dbara currently has no automatic inactivity expiry for database records. Delete my saved data removes the kitchen records linked to the current guest cookie and any authenticated hosting identity from the active database, and expires the guest cookie. Infrastructure backups and service-provider logs are outside this control; no instant removal or fixed retention period for those copies is promised here. A guest record cannot be found through these controls once its identifying cookie is lost.
Your choices
You can edit ingredients, remove individual items, decline or revoke microphone permission in browser settings, download your current kitchen, or delete its saved data. Deleting Dbara kitchen data does not delete a separate ChatGPT or browser-provider account.