Privacy · Updated 8 October 2026

Your kitchen.
Your choice of server.

Onionary has no advertising or analytics SDK and does not track you across apps or websites. It connects to the recipe backend you choose.

What stays on your device

Cached recipes, recent recipes, portion adjustments, checklist states, and timestamped undo history are stored in the app’s local container. Authentication tokens are stored in Keychain. Cooking history is not uploaded by the companion. iOS backups may include app-container data according to your device settings.

What reaches your backend

Account registration sends your name, email address, and a passkey public credential to the selected server. Passkey sign-in exchanges cryptographic proofs; the app and server do not receive Face ID or Touch ID biometric data or your passkey’s private key. Your passkey provider manages private keys under its own settings.

The backend receives authenticated recipe requests, account identifiers, and network information such as IP address. It stores accounts, recipes, public credentials, and session records. Its operator controls retention, access, backups, and any server logs. Ask your chosen operator for its privacy policy. This app site is not that backend.

Purposes and retention

Account information and sessions enable authentication and access to your recipes. Local cooking data remains until app data is removed; signing out retains it for your next sign-in. Backend retention depends on the operator. Support emails are used to handle your request; avoid sending sensitive recipe or account data unless necessary.

Deletion and privacy requests

Contact your backend operator for account deletion, access, correction, or export requests. For app privacy questions or developer-operated backends, email onionary@schaedler.rocks. See Support for deletion instructions. Remove saved passkeys separately in your password manager if desired.

Apple services

TestFlight and the App Store are provided by Apple. Apple may process installation, crash, and testing information under its own privacy terms and your settings.

This website

This static site is hosted by GitHub Pages. It sets no application cookies, uses no analytics, and loads no third-party fonts. GitHub may process request metadata for hosting and security. Email and GitHub issues are separate services; GitHub issues are public.