Help

Finding a recipe

Type an ingredient and press Find recipes. Add another, and the list keeps only recipes that contain every ingredient. Bourbon and bourbon are the same word. Lime is found inside “fresh squeezed lime juice,” and it is not found inside ginger or limoncello.

The name you get back is the heading of the recipe, not the file name. Open a result to read it, star it, or download the original file.

Browse lists every recipe by that title, A to Z. A shelf limits the list to one category. A word limits it to titles that contain that word, or, if you ask, to the ingredients as well.

Your recipes and the shared library

Recipes you upload belong to your account. They are private until you turn on Share my recipes with everyone on Preferences.

That control is a switch. On, your recipes join the library every signed-in person can search. Off, they are removed from that shared library at once. They are not deleted. You can still search them, and you can turn sharing back on later.

Adding recipes

On Upload, add a Word file, PDF, text file, spreadsheet, a photo of a card, or a zip of many of those. Folders inside a zip become shelves. A spreadsheet of several drinks is split into one recipe each. A photograph or a scanned PDF is read on the server so the ingredients can be searched. The original file is kept either way.

How your data is kept

• Invitation only. An admin creates each account. There is no public sign-up, and a recipe page is not open to someone who is not signed in.
• Passwords are hashed. The app stores a salted scrypt hash. It does not keep the password itself. An assigned password asks you to set your own.
• The sign-in cookie is locked down. It is HttpOnly, so a page script cannot read it, and SameSite, so another site cannot send it. On https://enginemeister.com, the cookie is marked Secure and the browser sends it only over an encrypted connection.
• Changes require a session token. Forms that save, upload, or delete include a token tied to your sign-in, so another site cannot submit them for you.
• Repeated wrong passwords pause sign-in. Too many failures from the same network or username wait a few minutes before another try.
• Private means hidden. Until you share, other people cannot open a recipe, download its file, or include it in their library download. The download contains only recipes you are allowed to see: yours, plus any that other people are currently sharing.
• Files stay on the server that runs Stillroom, not in the browser. Sharing does not email anyone and does not publish the library on the open web.

The address for this app is https://enginemeister.com. That name is only the address. The book itself is Stillroom.