Claim your listing

Menupickcom

Privacy Policy

The short version

  • You can browse the whole site without giving us anything.
  • We ask for an email address only if you subscribe or send a note.
  • We use privacy-friendly analytics that do not follow you across sites.
  • We do not sell or rent personal data, and there are no advertising trackers on Menu Pick.
  • You can ask to see, correct or delete your data at menupick.global@gmail.com.

1. Who is responsible

Menu Pick, 812 NY 104, Oswego, NY 13126, United States, is the controller of personal data collected through menu-pick.com and its subdomains. Privacy questions: menupick.global@gmail.com.

2. What we collect and why

What When Why Kept for
Email address You subscribe to the newsletter To send the weekly email you asked for Until you unsubscribe
Name, email, note text You submit a diner note To review and publish it, and to reply if we have a question While the note is published, plus 12 months
Name, email, message You use a contact or correction form To answer you and to keep a record of the correction 24 months
Business details and proof of ownership You claim a listing To verify you represent the business While the claim is active, plus 24 months
Server logs (IP, user agent, page, time) Every request Security, abuse prevention, debugging 30 days
Aggregate analytics Every page view To see which cities and pages are useful Aggregated, no individual profile kept

We do not ask for a date of birth, a phone number, or a payment method, because we do not need them.

3. Cookies

Menu Pick sets no advertising or cross-site tracking cookies. The site works with cookies disabled.

Cookie Purpose Type Life
mp_session Keeps you signed in while claiming or editing a listing Strictly necessary Session
mp_csrf Protects forms against cross-site request forgery Strictly necessary Session
mp_prefs Remembers dismissed notices and unit preferences Functional 6 months

Google Maps sets its own cookies, but only after you press Load the map on a listing page. Until you do, no request goes to Google. That is a deliberate choice, not an oversight.

5. Who else sees your data

We do not sell, rent or trade personal data. We share it only with the suppliers that run the service for us, under contract and only for that purpose:

  • Hosting and CDN — serving the site and storing the database.
  • Email delivery — sending the newsletter and replies.
  • Analytics — aggregate page statistics.
  • Google Maps — only once you press "Load the map".

Fill in the supplier names before publishing. A privacy policy that describes categories without naming the processors is not compliant in the UK or EU, and readers notice.

We would also disclose data if legally required, or to protect our rights or someone's safety.

6. Diner notes are public

If we publish your note, the display name you choose, the dish, the price and your text become public and may be indexed by search engines. Your email address is never shown. We suggest a first name and last initial rather than a full name.

Ask us to take a note down at any time and we will, usually within two working days.

7. Your rights

Wherever you live, you can ask us to:

  • show you what we hold about you;
  • correct it;
  • delete it;
  • stop using it for a particular purpose;
  • send you a copy in a portable format.

Write to menupick.global@gmail.com. We reply within 30 days and never charge for a request.

California residents have the rights to know, delete, correct and opt out of "sharing" under the CCPA/CPRA. We do not sell or share personal information as those terms are defined, so there is nothing to opt out of — but the request channel above works the same way, and we do not discriminate against anyone who uses it.

UK and EU residents may also complain to their data protection authority. In the UK that is the Information Commissioner's Office.

8. Where data is held

Our servers are in the United States. If you are in the UK or EU, your data is transferred there under the safeguards required by UK and EU data protection law, including standard contractual clauses with our suppliers.

9. Security

The whole site is served over HTTPS. Access to the admin systems is limited to the people who need it and protected by two-factor authentication. Passwords are hashed. No system is perfectly secure; if a breach affects you we will tell you and the relevant authority without undue delay.

10. Children

Menu Pick is not aimed at children and we do not knowingly collect data from anyone under 16. If you believe a child has sent us personal data, tell us and we will delete it.

11. Changes to this policy

The date at the top of this page shows the current version. Material changes are listed in the change history, and if you subscribe to the newsletter we will tell you there before they take effect.