Privacy policy

Effective 24 October 2026. For support or privacy requests, contact the platform owner through your restaurant’s account representative.

Information we store

Restaurant account names, email addresses, password hashes, menu content, uploaded photos, subscription dates and activity records are stored in Cloudflare D1. Session cookies keep staff signed in. The customer basket is saved on their own device.

Orders

When a guest submits an order, the restaurant receives the name, phone number when provided, table, order items and notes. Do not include payment card details or sensitive health records. Restaurants are responsible for their own order records and customer requests.

Tracking and retention

This application includes no advertising trackers. IP addresses are used only to create hashed, short-lived abuse-prevention keys. Expired sessions, recovery links and rate-limit records are cleaned automatically. Order records remain until the operator deletes or exports them according to their retention policy.

Access and deletion

Contact the restaurant for order information or the platform operator for account export and deletion. Restaurant staff can export their menu. The platform operator can export the database using Cloudflare’s tools.