Privacy policy

This policy explains what information the platform processes for restaurant accounts and for guests who view menus.

Guests viewing menus

• No account, name, email address or phone number is required to view a menu or call a waiter.
• We record anonymous usage events (menu opened, table QR scanned, dish viewed) with a random per-browser-tab identifier that is hashed on the server. We do not store IP addresses or device fingerprints for these events.
• For abuse prevention, a keyed hash of the network address is kept briefly to rate-limit waiter requests. It cannot be reversed to an IP address.
• If you cancel a waiter request, a random secret stored in your browser proves the request was yours.

Restaurant owners and staff

• We store your name, email address, a securely hashed password, and the restaurant content you create.
• Sessions use a secure, http-only cookie. Security-sensitive actions are written to an audit log.

Retention

Anonymous analytics are deleted after the retention period configured by the platform operator. Account data is kept while the account exists.

Contact

For privacy questions, contact the platform operator using the details on the Contact page.