Privacy policy
This policy explains what we collect, why, who else sees it, and what you can do about it. The short version: we do not require an account and we only store what you actively send us — but this site is ad-supported and uses Google Analytics and Google AdSense, so those services do receive data about your visit. This page says exactly what.
What we collect
- No account, no profile. Browsing a restaurant menu page requires no account, and we do not build a profile of you.
- What you send us. If you use the contact form, a price-correction form or the add a restaurant form, we store the name, email address and message you provide, plus a one-way hash of your IP address used only for rate limiting and abuse prevention.
- Your preferences. Your cookie choice and your light/dark theme choice are stored in your own browser.
- Technical data our providers see. Like any website, serving a page means your IP address and browser user-agent reach our infrastructure provider. This is inherent to how the web works and is used for delivery, security and abuse prevention — not for advertising.
Why we collect it
To answer you, to verify a reported price against the restaurant's menu, and to stop automated abuse of our forms.
We do not sell your personal information, and we do not run a marketing mailing list. We do show ads, and if you consent to personalised advertising, Google uses data it collects for that purpose — see the advertising section below.
Who else receives data
| Service | What it receives | Why |
|---|---|---|
| Cloudflare | Your IP address, user-agent and the URL you requested. | Delivers the site and filters malicious traffic. Acts as our processor. Privacy policy. |
| Google Analytics 4 | Pages viewed, approximate location, device and referrer. Cookieless and aggregated unless you accept analytics cookies. | Tells us which pages are useful. Privacy policy. |
| Google AdSense | The page you are on and your IP address. Additional identifiers only if you accept marketing cookies. | Pays for the site by showing ads. How Google uses ad data. |
Advertising
This site is funded by ads served through Google AdSense.
- If you have not accepted marketing cookies — you see only non-personalised ads, chosen from the content of the page you are reading rather than from anything about you. Google still receives your IP address, because it must in order to deliver the ad and prevent fraud.
- If you accept — Google and its certified partners may set cookies to personalise ads, cap how often you see the same one, and measure performance.
You can change this at any time through the Cookie settings link in the footer, or independently of this site at Google My Ad Center.
Analytics
We use Google Analytics 4 to see which pages people find useful. Google Consent Mode v2 sets analytics storage to denied before any tag runs, so unless you opt in, Analytics stores nothing on your device and reports only aggregate, cookieless measurements that cannot identify you.
We have chosen to say this plainly rather than claim the site is tracker-free: the tag does load on every page, it simply cannot store or identify anything until you allow it.
Where data is processed
We are based in Canada and this policy is written to meet PIPEDA. Cloudflare and Google both operate globally, which means data about your visit may be processed on servers outside Canada, including in the United States, and may be subject to the laws of those countries. Both companies publish the safeguards they apply to such transfers in the privacy policies linked above.
How long we keep it
- Form submissions — kept while useful for editorial follow-up, then deleted. In practice this is months, not years.
- Rate-limiting hashes — short-lived, measured in hours.
- Analytics data — retained by Google under our account's retention setting; we do not hold a separate copy.
- Your cookie choice — 12 months, then we ask again.
Your rights
You can ask us what we hold about you, ask us to correct it, ask us to delete it, or withdraw a consent you previously gave. Contact us through the contact page and we will act on it — normally within 30 days, as PIPEDA requires.
If you are unhappy with how we handle a request, you can complain to the Office of the Privacy Commissioner of Canada. Visitors in the UK or EU have equivalent rights under UK GDPR / GDPR and may complain to their own supervisory authority.
Children
This site is intended for a general audience and is not directed at children under 13. We do not knowingly collect personal information from them. If you believe a child has sent us information through a form, contact us and we will delete it.
Cookies
See our cookie policy for the full, named list of what each service may set and when.