Privacy Policy
Last updated: August 2026 — updated to cover the new account features
This policy explains what information Pancit.com collects when you visit the site — including if you create a free account — how it's used, and the choices you have.
Information we collect
Analytics. Pancit.com uses Google Analytics to understand how the site is used — pages visited, general location (city/country level), device type, and how you arrived at the site. Google Analytics sets cookies in your browser to do this. It does not collect your name or email address unless you provide it elsewhere on the site.
Contact form and email. If you use the contact form or email us directly (including sending in a recipe suggestion or a photo of a dish you made), we collect whatever you send us — typically your name, email address, and message content — so we can respond and, if you've offered to share a recipe or photo, potentially feature it on the site.
Account information. If you create a free Pancit.com account, we collect your email address and password (Pancit.com never sees or stores your actual password — our authentication provider, Supabase, stores it securely hashed on our behalf), plus whatever you choose to add: a display name, a username, an optional bio, and an optional avatar or accent color to personalize your profile. At signup, and anytime afterward from My Account, you can also independently opt in to two kinds of email: a newsletter (new recipes and restaurant features) and occasional product/account updates — both are off unless you turn them on yourself, and turning either on doesn't mean Pancit.com is currently sending that kind of email; it just means you'd be included if and when we do.
Activity you choose to track. An account lets you mark restaurants as "visited" and recipes as "cooked," including how many times, and optionally save items or add them to your favorites, create collections, and send or receive recommendations (which may include a short note you write). All of this is created entirely by your own actions — we don't track your activity on the site beyond what you deliberately mark.
Referrals. If someone signs up using your personal invite link, we record that connection so it can count toward your Ambassador badge. We never make public who specifically referred whom — only your own total referral count and badge are shown, and only to you and (as a badge) on your public profile if you choose to keep it public.
Fonts and other third-party scripts. This site loads resources from a handful of external services as part of running normally: Google Fonts (typefaces), jsDelivr and unpkg (code libraries used to power account features and an interactive map), and Cloudflare Turnstile (a bot-detection check shown on sign-up and sign-in forms, similar to a CAPTCHA). Each of these involves your browser making a request to that service's own servers, which may log basic technical information (like your IP address) as part of operating that service — Pancit.com doesn't control what those providers do with that request beyond what's needed to serve the resource. If you sign up or reset your password, your new password is also checked against a public database of previously breached passwords (via the "Have I Been Pwned" service) — this is done by sending only a small, irreversible fragment of your password's cryptographic hash, never the password itself, so that service never sees or can reconstruct your actual password.
How we use information
We use the information above to operate and improve Pancit.com, respond to messages, run the account features described in this policy, and — only with your input — feature reader-submitted recipes or photos. We don't sell your personal information, and we don't share it with third parties except the service providers mentioned in this policy (Google Analytics, Google Fonts, Netlify, Supabase, Cloudflare, jsDelivr/unpkg, and the Have I Been Pwned password-check service).
Public profiles
Every account gets a profile page at pancit.com/user/<your username>, and it's public by default. A public profile shows your username, display name, bio, avatar, accent color, your badges, and total counts (like how many restaurants you've visited) — but never your email address. The specific restaurants and recipes you've individually tracked stay private by default too, visible only to you — but unlike everything else on this list, that one is a choice you can change: My Account has two independent toggles, one for your visited-restaurants list and one for your cooked-recipes list, each off unless you turn it on yourself. Turning one on makes that specific list (names, not just the count) visible on your public profile; the other stays exactly as private as it was. You can switch your profile to private at any time from My Account; a private profile shows as "not found" to other visitors rather than confirming it exists — and while it's private, neither of the two list toggles matters, since nothing on the profile is visible to begin with.
Recommendations you send to another user include your username and display name, since the recipient needs to know who sent it. Anything you save, add to your favorites and choose to keep public, or organize into a collection follows the same rule above: favorites can appear on your public profile if you add them there, but your saved-for-later list and collections are never shown to anyone but you.
Cookies and local browser storage
Google Analytics sets cookies to distinguish visitors and sessions. You can block or delete cookies through your browser settings; doing so may affect how some site features work but won't prevent you from reading recipes or browsing the restaurant directory. Separately, if you sign in to a Pancit.com account, our authentication provider (Supabase) stores a session token in your browser's local storage to keep you signed in between visits — clearing your browser's site data will sign you out, and using "Sign out" in My Account clears it directly.
Children's privacy
Pancit.com is not directed at children under 13, and we do not knowingly collect personal information from children. Creating a Pancit.com account additionally requires that you be at least 13 years old.
Your choices
You can use most of Pancit.com without providing any personal information at all — browsing recipes, the restaurant directory, and the glossary doesn't require it. Information is only collected if you choose to use the contact form, email us, or create an account. If you do create an account, you're also in control of it: your bio and avatar are optional, you can switch your profile between public and private at any time from My Account, you can turn either of the two email opt-ins on or off whenever you like, you can remove anything you've saved, favorited, or organized into a collection, and My Account has a self-service option to permanently delete your account and everything tied to it — your profile, your tracked activity, your saved items and collections, and any recommendations you've sent or received.
Changes to this policy
We may update this policy from time to time. The "last updated" date at the top of this page reflects the most recent revision.
Contact us
Questions about this policy? Email us at info@pancit.com or use our contact form.