Privacy policy

If you create an account:

• Your email address and display name. The display name is shown next to dish ratings you publish.
• A password, only if you sign up with email. It is stored as a one-way scrypt hash, never in readable form.
• Your Google account ID, only if you sign in with Google. From Google we receive only your name, email address and whether Google has verified that email. We do not receive your contacts, files or anything else.
• What you contribute: dish ratings and comments; whether a restaurant serves a menu du jour, and its price; and, for one day, that you reported today's lunch reading as wrong.

We do not use analytics or advertising trackers, and we do not sell or share your data with anyone for marketing.

• Saved restaurants are kept in your browser's local storage and never sent to us.
• Your location, if you allow it for “near me”, is kept in your browser for the current tab only. It is sent to our server to sort restaurants by distance and is not stored there.

Only three, and all are needed for the site to work:

• forkful_session keeps you signed in, for up to 30 days. Only a hash of it is stored on our side.
• forkful_locale remembers your language, for a year.
• letzbite_google_flow exists for up to ten minutes while you sign in with Google, to make sure the sign-in you finish is the one you started.

We use your account data to provide the account you asked for (GDPR Article 6(1)(b)), and to keep the site secure and ratings honest, for example by counting each person once (Article 6(1)(f), legitimate interest).

• Google Cloud runs the website, in Belgium (europe-west1). Like any web server it keeps short-lived request logs, which include IP addresses, for about 30 days.
• MongoDB Atlas holds the database, also on Google Cloud in Belgium.
• Google handles sign-in, if you choose “Continue with Google”.

Some pages load content straight from other sites in your browser: the map on a restaurant page comes from OpenStreetMap, and restaurant photos come from each restaurant's own website. Those sites see your IP address, as with any link, under their own privacy policies.

• Your account and contributions: until you ask us to delete them.
• Sign-in sessions: 30 days, or until you sign out.
• A lunch report: until the next morning's menu reading replaces it.

You can ask to see, correct, export or delete your data, or object to how it is used. Write to er.nidhi.g@gmail.com from the address on your account and we will reply within one month. Deleting your account also removes your ratings and reports.

If you are not satisfied, you can complain to Luxembourg's data protection authority, the CNPD (cnpd.public.lu).

If this policy changes, the new version will be posted here with a new date.