Cookie Policy

Last Updated: October 17, 2026

What Cookies Are

A cookie is a small piece of text a website asks your browser to keep and send back on later visits. Browser storage is similar, but stays in your browser and is only read by the page itself. This policy covers both, on the website (trygusteau.com) and the app (gusteau.ar0.eu). It goes with our Privacy Policy.

Our Cookies

Both are strictly necessary: Gusteau can't sign you in or keep your account safe without them. Neither can be read by scripts on the page, and both are only sent over secure connections.

• gs_session keeps you signed in. It holds a random code tied to your sign-in, and lasts up to 30 days, or until you sign out or sign that device out from your Dashboard.
• gs_device is a random code that remembers this browser between sign-ins, so we can email you when a browser we haven't seen signs in to your account. It means nothing on its own and lasts up to 400 days.

If you send your shopping list to Kroger, the app also sets gs_grocery for up to 15 minutes: a random code that matches you up when Kroger sends you back, so nobody else can finish your hand-off. It is deleted as soon as you're back.

If you choose Sign In with Google, we set gs_oauth for up to 10 minutes: a random code that has to match when Google sends you back, so nobody else can finish the sign-in for you. It is deleted as soon as you're signed in.

If you open a friend's Refer a Friend link, the website sets gs_ref for up to 30 days: their link's code and when you opened it, so your two free weeks and their reward can be matched to you when you start. It can't be read by scripts, it's set only because you opened the link, and nothing else uses it. We don't use it to follow you or share it with anyone.

The website and the app each set their own pair. When you go from one to the other while signed in, a one-time link that works for 60 seconds signs you in there too.

Browser Storage

The website and the app each keep a copy of your name, email and plan in your browser's storage while you're signed in, so the page shows you signed in straight away. It is removed when you sign out.

The app keeps some more things there, so it opens quickly, works without a connection and remembers where you were:

• your recipes, plan, shopping list, kitchen, settings and similar, on that device;
• copies of the app's own pages, styles and scripts, so it opens without a connection;
• a key that identifies your device on Recipe Boards;
• a note that you've opened Gusteau there before, so he greets you as a returning cook;
• for a little while, the request Gusteau is working on, so a reload doesn't lose it;
• your kitchen timers, so they keep running through a reload;
• if you send a list to Kroger, the zip code you typed, so you don't have to type it again;
• on the website and in the app, whether sounds are on, once you've switched them off.

None of it is used for advertising or to follow you elsewhere.

Other Companies

• Cloudflare runs our sites. Its Web Analytics counts visits without cookies. When you ask for a sign-in code, Cloudflare Turnstile checks that you're a person; Cloudflare may also use a short-lived, strictly necessary security cookie to tell people from bots.
• Stripe handles payments. You add a card on our own card form, on the Dashboard pages where you start the free trial, pay for a plan or a gift, or change your card. The card number, expiry and security code are typed into small fields that Stripe serves inside that form, and loading them sets two strictly necessary cookies on trygusteau.com to spot card fraud: __stripe_mid (up to a year) and __stripe_sid (30 minutes). They're Stripe's, under Stripe's privacy policy, and aren't set anywhere else on our sites. If your bank asks to confirm a payment is you (3D Secure), its check opens over our page and may use the bank's own cookies.
• Google uses its own cookies on its sign-in page, only if you choose Sign In with Google.

We don't use advertising, social media or cross-site tracking cookies, and we don't let anyone else put them on our pages.

Your Choices

Because we only use what's strictly necessary, there's nothing to switch on or off and no banner to click. You can block or delete cookies and site data in your browser's settings. Deleting them signs you out and clears what the app kept on that device; what's saved to your account stays, and comes back when you sign in again. Blocking our cookies means you can't sign in.

Changes

If we ever add a cookie or storage that isn't strictly necessary, we'll update this page and the Privacy Policy first, and ask for your consent where the law requires it.

Gusteau is made and run by Wyzie LLC. Questions about this page: hey@trygusteau.com.