Privacy Policy
Last updated: 2026-10-08
This policy covers the Bouillon Road app for iPhone and the website at bouillonroad.info. "We" and "us" mean the developer of Bouillon Road. It describes the app exactly as it ships today, and it is effective from the date above.
The short version
- There is no account. We never ask for your name, email, location, contacts or photos.
- Your shelf, road, swaps, saved recipes and settings are stored on your iPhone and are never sent anywhere.
- The app downloads public recipes and photos from Wikimedia sites. Those requests carry no identifier for you.
- Notifications are optional and go through OneSignal, which holds a device record with your device's identifier for vendor.
- Each time the app starts, it asks bouillonroad.info whether its version is still current, sending one identifier, the app's bundle ID and its version.
- No advertising, no analytics, no tracking across apps or websites, and no App Tracking Transparency prompt, because there is nothing to ask about.
What we do not collect
Bouillon Road does not collect your name, email address, phone number, physical address, precise or approximate location, contacts, photos, camera or microphone input, health or fitness data, payment details, browsing history or search history. It does not use the advertising identifier (IDFA), contains no advertising, analytics, attribution or crash-reporting SDK, and does not sell or share personal information for advertising.
If you have opted in to share crash data with developers in iOS Settings, Apple may pass us anonymous crash reports under Apple's own privacy policy. The app itself adds nothing to them.
What stays on your iPhone
Everything you enter stays on the device: the tails on your Shelf, the stops on your Road, the swaps you accept, your saved recipes, your home kitchen, your ingredient filters and your other settings. The downloaded recipe catalogue and thumbnails are cached on the device too. None of it is uploaded, synced to a cloud service or visible to anyone else. The app has no feed, no sharing and no messages.
Your iPhone may include app data in your own iCloud or computer backups, according to your backup settings. That is handled by Apple and your device, not by us.
Deleting it: Settings → Reset in the app deletes your shelf, road, swaps, saved recipes, settings and the recipe cache, and returns you to the welcome screens. Deleting the app removes all of it as well.
Recipe and photo downloads from Wikimedia
Recipes come from the Wikibooks Cookbook and photos from Wikimedia Commons. On first launch, and afterwards about once a week to check for updated recipes, the app sends read-only requests to:
en.wikibooks.orgfor recipe lists and recipe texts;commons.wikimedia.orgfor photo details and licenses;upload.wikimedia.orgfor the photo files themselves.
These requests name the pages and images being fetched and carry a User-Agent header with the app's name, its version and our support address, as Wikimedia's rules ask of apps. They contain no identifier for you or your device, and nothing about your shelf, road or settings.
Like any website, the Wikimedia servers see the IP address the request comes from and standard technical details of the connection. That information is handled by the Wikimedia Foundation under its privacy policy; we never receive it. The same applies if you follow a "View source & contributors" link from a recipe to Wikibooks.
The launch check
Each time the app starts from scratch, it sends one short request to https://bouillonroad.info/api/sync with exactly three values:
device_push_token: the OneSignal subscription ID if one exists; if not, your device's identifier for vendor (IDFV); if neither is available, the word "unknown";bundle_identifier: the app's bundle ID, the same for everyone;app_version: the version number of the app you have installed.
Why: so that we can tell an old version that it should be updated, or, in rare cases, that it no longer works with current recipe data. The server answers with one status word and the app carries on. If the request fails or you are offline, the app simply starts.
What happens to it: our server reads the version to decide the answer and does not store the request. bouillonroad.info is hosted on Cloudflare, which processes the connection (including your IP address) to carry the request, under Cloudflare's privacy policy. The identifier for vendor is specific to apps from the same developer on your device, changes if you remove them all, and is not linked to your name or any account.
In the rare case that an installed version must be replaced, the app may show a short notice page from bouillonroad.info inside the app. That page sets no cookies and runs no tracking. Like any in-app web view, iOS may keep ordinary web storage for it, which deleting the app removes.
Notifications and OneSignal
The last welcome screen asks whether you want notifications. Saying no changes nothing else in the app. We use OneSignal (OneSignal, Inc., United States) to send them.
The OneSignal SDK is part of the app, so it registers a device record when the app starts, whether or not you allow notifications. That record holds a OneSignal subscription ID, your device's identifier for vendor, the push token Apple issues if you allow notifications, and technical details the SDK sends to keep the record working: device model, iOS version, app version, language, time zone, when the app was last opened, and whether a notification was opened. OneSignal also sees the IP address of the connection.
We use this record only to send notifications and for the launch check above. We never attach a name, email address or phone number to it, and we do not use it to track you or build a profile. OneSignal acts as our service provider.
Turning them off: iOS Settings → Notifications → Bouillon Road. You can turn them back on the same way.
Every data flow at a glance
| Category | Collected? | Purpose | Kept for | Third party | Your control |
|---|---|---|---|---|---|
| Identifier for vendor (IDFV) | Yes | Notifications, launch check | OneSignal: while the device record exists. Our server: not stored | OneSignal, Cloudflare (hosting) | Delete the app; ask us to delete the OneSignal record |
| Push subscription ID and push token | Only if notifications are allowed (token); subscription ID always | Sending notifications | While the device record exists | OneSignal | iOS Settings → Notifications |
| App version and bundle ID | Yes, sent with the launch check | Version check | Not stored by our server | Cloudflare (hosting) | Sent only when the app starts |
| Analytics events | No | — | — | — | — |
| Crash diagnostics | No crash SDK | Apple's own opt-in reports only | Apple's terms | Apple | iOS Settings → Privacy & Security → Analytics |
| Advertising identifier (IDFA) | No | — | — | — | — |
| Attribution data | No | — | — | — | — |
| Web view cookies and storage | Only for the rare update notice page; it sets no cookies | Showing the notice | Until the app is deleted | None | Delete the app |
| Your shelf, road, swaps, saved recipes, settings | No, stored on device only | Running the app | Until you reset or delete the app | None | Settings → Reset |
| Support emails | Only if you write to us | Answering you | Up to 12 months after the conversation ends | Our email provider | Ask us to delete them |
Children
Bouillon Road is rated 4+. It has no accounts, no chat and nothing to sign up for, and it shows no recipes that contain alcohol. We do not knowingly collect personal information from children. A parent or guardian who believes a child has sent us personal information, for example by email, can write to us and we will delete it.
Where data is processed
OneSignal processes its device records in the United States. Cloudflare runs a global network, so the launch check may pass through a data centre near you before reaching our code. Wikimedia's servers are mainly in the United States. If you are in Canada or elsewhere, this means data described above may be processed outside your country, under those providers' safeguards.
Your choices and rights
Depending on where you live, including under Canadian privacy law and California law, you may have the right to know what we hold about you, to have it deleted or corrected, and to object to its use. Because the app has no accounts, we hold very little and cannot look you up by name. To exercise a right, or to ask us to delete the OneSignal record for your device, email us; we will explain how to identify the record and confirm once it is gone. We answer within 30 days. We do not sell personal information and do not share it for cross-context behavioural advertising.
On your own, you can at any time: turn off notifications in iOS Settings, use Settings → Reset in the app, or delete the app, which stops every flow described here.
This website
bouillonroad.info sets no cookies, runs no analytics and loads no third-party scripts or fonts. As with any website, Cloudflare processes the IP address and request details of visitors to serve the pages.
Changes to this policy
If the app starts sending anything new, or stops, we will update this page before that version is released and change the date at the top. Significant changes will also be mentioned in the app's release notes.
Contact
Questions or requests about privacy: support@bouillonroad.info. We usually reply within two business days.