A sub-processor is a third party we use to help run the platform, who may as a result process personal data on our behalf. Art. 28 GDPR requires us to disclose these to the venues whose data we process, and we think everyone browsing a menu deserves to see the same list.
| Sub-processor | What they do | Where |
|---|---|---|
| Microsoft Azure | Hosts the application and the database. | Norway East (EEA) |
| Cloudflare, Inc. | DNS, TLS termination at the edge, and DDoS protection for our domain. | Global network |
If you contact us via the WhatsApp link on our site, that conversation is handled within WhatsApp, operated by Meta Platforms Ireland Limited, under WhatsApp's own terms and privacy policy — we don't control how WhatsApp processes messages on its platform.
No advertising network. No Google Analytics or any other analytics/tracking tool. No Google Fonts or other third-party font CDN — every font on this site is self-hosted. No email marketing platform. If any of that changes, this page changes with it, and — where the change would introduce a new tracking cookie — we'll add a consent mechanism before we ship it, not after.
We'll update this page whenever we add, remove, or change a sub-processor. If you're a venue with a signed Data Processing Agreement with us, material changes will also be notified to you directly, giving you the opportunity to object as provided for in that agreement.
Other documents