Legal
Privacy policy
We collect as little personal data as we can, and we never sell it.
Last updated 27 October 2026
What we collect
- Forms (suggestions, corrections, claims, contact, data requests): the details you enter, including your email address.
- Abuse protection: a keyed one-way hash of your IP address, used only to limit repeated submissions. We do not store raw IP addresses with submissions.
- Staff accounts: email, display name, a hashed password and session records.
- Server logs kept by our hosting provider for security and reliability.
We do not use advertising trackers or third-party analytics cookies.
Business information
Restaurant listings contain business information (name, address, business phone, website). We do not publish personal contact details of individuals. If a listing exposes personal information, use the data request form and we will remove it.
Why we use it
To review and publish restaurant information, to verify ownership claims, to reply to you, and to protect the service from abuse. Our legal bases are your consent (forms) and our legitimate interest in running an accurate, secure directory.
Who we share it with
Our hosting and database providers process data on our behalf. Map tiles are loaded from the map tile provider, which receives your IP address as part of normal web requests. We do not sell or rent personal data.
How long we keep it
Submissions and correspondence: up to 24 months after they are resolved. Rate-limit records: up to 24 hours. Staff sessions: until they expire (14 days) or the user signs out.
Your rights
You can request access to, correction of, or deletion of your personal data through our data request page. We respond within 30 days. You may also complain to your local data protection authority.
Contact
Use the contact page.