Privacy Policy

The service is operated by MyOrderGuide from the United States and is intended for users in the United States. We do not currently offer, market, or direct our services to users in the European Union, EEA, United Kingdom, or Switzerland. If you visit from those regions anyway, analytics cookies are off by default and are only enabled if you opt in via the consent banner; your information is processed in the United States.

We collect only what the product needs. Most of it lives in your browser’s localStorage, not on our servers, unless you sign in.

Sensitive information. Two categories deserve special mention. Precise geolocation is collected only when you grant the browser permission, is used solely to find restaurants for the request you just made, is never assembled into a movement history, and is never disclosed for any other purpose. Dietary restrictions and allergies you enter may imply health information; they are used only to filter recommendations and are stored on your device (or in your account if you sign in). We do not use sensitive information to infer characteristics about you or for any secondary purpose.

For visitors from regions where a legal basis is required (such as the EEA or UK), this is the basis we rely on for each purpose:

• Performing the service you asked for (recommendations, menu scanning, group sessions, accounts) — contract.
• Precise geolocation — consent, via the browser permission prompt; you can decline and use a ZIP code.
• Analytics cookies — consent in the EEA/UK/CH (the banner); legitimate interest in aggregate product analytics elsewhere.
• Security, rate limiting, abuse prevention, debugging — legitimate interest in keeping the service running and safe.

We do not sell or rent personal information, do not share it for cross-context behavioral advertising, and do not use it for third-party advertising of any kind.

We use a small number of cookies and similar technologies:

• Essential cookies — a session cookie when you sign in, and a group-session cookie when you join a group order. The service doesn’t work without these.
• Google Analytics — sets cookies (_ga, _ga_*) to help us understand page views and feature usage in aggregate. We run it with Google Consent Mode: advertising signals are disabled everywhere, and in the EEA/UK/CH analytics cookies stay off unless you accept the banner. Google processes this data on our behalf; see Google’s privacy policy. You can opt out any time with the Google Analytics opt-out browser add-on or a content blocker.
• Vercel Analytics — privacy-friendly, cookieless page-view counts from our hosting provider.

Global Privacy Control. Because we do not sell or share personal information, a GPC signal doesn’t change how we treat your data — there is no sale or sharing to opt out of.

Only service providers that operate the product for us, under their data-processing terms: OpenAI (generating recommendations and reading menu photos), Google (Places restaurant search, sign-in, and Analytics), Vercel (hosting and analytics), and our database provider (account data). Each receives only what it needs to perform its function and may not use it for its own purposes. We may also disclose information if required by law.

We are US-based, so data is processed in the United States. Our major providers (Google, Vercel) participate in the EU-US Data Privacy Framework or offer equivalent safeguards (such as Standard Contractual Clauses) for any data originating in the EEA or UK.

If you are a California resident, you have the right to know and access the personal information we hold about you, to correct it, to delete it, to opt out of sale or sharing (we do neither), to limit the use of sensitive personal information (we already use it only to provide the service you request), and to not be discriminated against for exercising any of these rights. Email us at the address below; we respond within 45 days and will verify requests using the email associated with your account.

Although we don’t direct the service to these regions, if you use it from there you may exercise the rights of access, rectification, erasure, restriction of processing, data portability, objection, and withdrawal of consent (decline the location prompt, or clear the consent decision in your browser to re-choose on the analytics banner). You also have the right to lodge a complaint with your local supervisory authority.

• Preferences & usage data: clear your browser’s site data for myorderguide.app to remove everything stored on your device.
• Location: deny the browser location prompt and use a ZIP code instead — or nothing at all.
• Analytics: decline the consent banner (EEA/UK/CH) or use the Google Analytics opt-out add-on linked above.
• Account data: email us to access, correct, export, or delete the data associated with your account.

Retention periods per category are listed in the table above. In short: device data stays until you clear it, account data is kept while your account is active and deleted on request, server logs are held up to 30 days for debugging and security, and Google Analytics data is retained for 14 months.

MyOrderGuide is not directed to children under 13, and we do not knowingly collect personal information from them.

If we make material changes, we’ll update this page and the date above. Continued use of the service after changes means you accept the updated policy.

Questions or requests: support@myorderguide.app