Your kitchen. Your choices.

Data information updated 8 October 2026. Morsilo is provided under the Sancire Labs brand. For privacy questions or requests, contact support@morsilo.com.

You can browse recipes and use the cooking tools without a community account. Your home address is not needed. A nickname is enough for your public profile.

What stays on this device

Plans, favourites, cooking progress, notes, preferences, pantry items, estimates and learning progress are saved in your browser. An optional offline copy stores app files and selected narration. Shared-device users may be able to read this information. Clearing browser storage can remove it.

Use “Your data” in the app footer to download a backup, import one or delete local data. Account backup is optional and uploads the kitchen data you choose to save. Downloaded files remain wherever you put them.

Accounts and sharing

Community accounts store a username, a salted password hash and sign-in sessions. We do not need your real name or email to create an account. Your username, display name, bio, profile photo and published posts are public. Other people can copy public information.

Saved posts, blocks, reports and account backups are kept by the service. Shared shopping lists are visible to the household you join. An event’s private meeting details are shown to its host and approved attendees. Moderators can review reported content.

Uploaded photos are resized and converted to JPEG, removing embedded metadata. This does not hide addresses, faces or other personal information visible in the picture.

Location, prices and voice

Hosting and operational information

Cloudflare serves the website and Render hosts the community service. These providers process network information such as IP addresses to deliver and protect the service. Provider processing can involve countries outside the UK. Public price providers process the lookup requests described above.

The app uses a necessary sign-in cookie that expires after seven days. Local storage remembers your kitchen; it is not advertising tracking. No advertising or customer analytics integration is currently configured in the app.

Community rate limits use a hash of the visitor address or an account identifier. Expired rate records are eligible for removal after one day. Diagnostic events added to this version contain a random request reference, request method, status and duration, without request bodies, passwords or account names. Hosting providers may keep separate access logs.

Keeping, exporting and deleting data

Local information remains until you delete it or the browser clears it. Account content and backups remain while needed for your account, unless you remove them. The service retains up to four versions of your account backup. Expired sessions and unattached uploads are cleaned by service maintenance; unused uploads become eligible after one day.

In Community → My profile → Account settings, you can export your account, change your password or delete your account. Deletion removes its active-service records and photos, and comments on your posts. If you own a household, ownership passes to the earliest remaining member. Local data and copies others downloaded are separate.

Service backups may temporarily retain deleted records. Backup retention, provider logs and international transfer arrangements must be confirmed by the operator before this notice is used for a wider launch. Contact support for the current operational details.

Your choices and rights

You can ask for access, correction, deletion or a portable copy of your information, and ask about restricting or objecting to its use. We may need to verify account ownership. Never send your password or recovery code by email. You can also raise a concern with the UK Information Commissioner’s Office.