Cookwala / Privacy

Privacy policy

Cookwala has no accounts, no sign-in, no cookies of its own and no analytics. The recipe data is public. This page says what that means for the website, the open API at mcp.cookwala.ai, and the MCP server, in plain terms. Last updated 8 October 2026.

What Cookwala collects

Nothing about you. Cookwala's own code does not store the questions people ask, does not keep a log of who called which tool, does not set tracking cookies and does not send telemetry. The npm package @cookwala/mcp runs on your machine and is never tracked.

The open API and MCP endpoint

What is sent: the request you make (a search, a recipe id, filters) goes to https://mcp.cookwala.ai. It is answered from public files on cookwala.ai and discarded. Nothing is written to a database; there is none.
What the host sees: the service runs on Cloudflare Workers and the website on GitHub Pages. Like any web host, they process the network address and request details to serve the request and to protect against abuse, under their own policies: Cloudflare and GitHub. Cookwala does not receive or keep that data.
Rate limiting: if a per-address limit is switched on for the open API, the address is used only as a short-lived counter key at the host.
The gated route: the token-protected /mcp route is listed at mcprush.com, which counts calls made through its gateway. That is the one opt-in exception; the open route and the npm package are not tracked.

When you use Cookwala inside an AI assistant

If you use Cookwala from ChatGPT, Claude, Gemini or another assistant, the assistant's provider sees your conversation under its own privacy policy. Cookwala only receives the tool call the assistant makes, such as a search term or a recipe id. Do not put personal or medical information in a question; Cookwala does not need it and the data is not personal.

Health-related fields

Allergen, diet and diabetic labels describe recipes, not people. They are screens from ingredient names, never guarantees and never medical advice. Cookwala does not ask for, receive or store anyone's health information.

Contact, and reports

Questions about this policy: [email protected] or GitHub issues. Security problems: security.txt. This policy changes only by a public commit in the repository, so its history is visible.