Privacy Policy

Information we collect

Account data. If you create an account, we store the email address, password hash, and any profile fields you provide (display name, avatar, location preference). Auth is handled by Supabase.

Content you submit. Restaurant submissions, reviews, ratings, edit suggestions, and contact-form messages are stored so we can review and publish them.

Location. If you grant browser geolocation, we use your coordinates only to sort restaurants by distance in your current session. We do not store your location on our servers.

Usage analytics. We use Vercel Analytics for aggregate, privacy-friendly traffic stats (page views, referrers, approximate region). It does not use cookies or fingerprinting, and we do not receive personally identifying data from it.

Server logs. Our hosting provider logs IP addresses, user agents, and request paths for security and debugging. These rotate on a short retention window.

How we use information

• To run the site — show listings, save your account, process submissions and reviews.
• To prevent abuse and spam.
• To respond to messages you send us.
• To improve the product (which features people use, what breaks).

We do not sell personal information. We do not run third-party advertising on the site.

Third-party services

• Supabase — database, authentication, and file storage.
• Vercel — hosting and analytics.
• Google Maps Platform — map tiles, geocoding, and directions. Subject to Google's privacy policy.
• Formspark — processes contact-form submissions.
• Restaurant websites — we fetch the Open Graph image and metadata from each restaurant's public website to display a thumbnail.

Cookies and local storage

We use a small number of essential cookies and browser storage items: a session cookie to keep you signed in, and local storage to remember your filter preferences. We do not use advertising or cross-site tracking cookies.

Your choices

• You can browse without an account.
• You can edit or delete profile data from your profile page.
• You can request account deletion by emailing us via the contact page; we will delete your account and personal data within 30 days, except where retention is required by law.
• You can deny location access at any time in your browser settings.

Children

The site is not directed at children under 13, and we do not knowingly collect data from them.

Changes

We may update this policy as the site evolves. We'll bump the "last updated" date above and, for material changes, surface a notice on the site.

Contact

Questions or requests? Reach us through the contact page.