A sub-processor is a third party we use to help run the platform, who may as a result process personal data on our behalf. Art. 28 GDPR requires us to disclose these to the venues whose data we process, and we think everyone browsing a menu deserves to see the same list.
| Sub-processor | What they do | Where |
|---|---|---|
| Microsoft Azure | Hosts the application and the database, which run on the same Azure virtual machine. | Norway East (EEA) |
| Cloudflare, Inc. | DNS, TLS termination at the edge, and DDoS protection for our domain. On our own marketing pages only, also Cloudflare Web Analytics: cookie-free, aggregated page-view statistics (see below). | Global network |
If you contact us via the WhatsApp link on our site, that conversation is handled within WhatsApp, operated by Meta Platforms Ireland Limited, under WhatsApp's own terms and privacy policy — we don't control how WhatsApp processes messages on its platform.
Two further providers are built into the software but are not active at the moment. We list them so the picture is complete; if we switch one on, we will move it into the table above and, where a signed Data Processing Agreement is in place, notify affected venues first.
The example menus we use to show off the product carry stock food photos from Unsplash. We download those photos onto our own servers when we set up the demonstration data, so your browser loads them from us, not from Unsplash — viewing a demo menu sends no data to Unsplash. A real venue's own menu never uses Unsplash.
No advertising network. No Google Analytics. No Google Fonts or other third-party font CDN — every font on this site is self-hosted, and the demonstration photos described above are likewise served from our own servers rather than hot-linked from a third party. No email marketing platform.
The one analytics tool we use is Cloudflare Web Analytics, and only on our own marketing pages (home, features, pricing, FAQ, examples, comparison, venue-type and country pages, blog, contact and demo-request pages). It counts page views and page-load speed in aggregate; it does not use cookies or other identifiers stored on your device for analytics, and it builds no profile of you. It is never loaded on a venue's menu, cart, order or feedback pages, on the sign-in pages or the admin dashboard, or on these legal pages — so it never sees the data of a venue's diners or staff. If any of that changes, this page changes with it, and — where the change would introduce a new tracking cookie — we'll add a consent mechanism before we ship it, not after.
We'll update this page whenever we add, remove, or change a sub-processor. If you're a venue with a signed Data Processing Agreement with us, material changes will also be notified to you directly, giving you the opportunity to object as provided for in that agreement.
Other documents