Privacy policy

Last updated: October 19, 2026. This is a starting template — have it reviewed for your jurisdiction before launch.

What we collect

When you start the onboarding we collect the details you give us about your restaurant (name, address, opening hours, menu, images, logo, chosen style and colors) and about you (name, email, phone). We also store technical details such as the page you came from and UTM parameters.

How we use it

To design and build your website, to contact you about your project (including if you stop the onboarding halfway), to provide hosting and support, and to send occasional product updates you can opt out of at any time.

Where it is stored

Onboarding data is stored with Supabase (hosted on AWS) and website files with Cloudflare. We do not sell your data. We share it only with the processors needed to deliver the service.

Your rights

You can ask us to access, correct or delete your data at any time by emailing thomasderix@restaurantfront.com.

Cookies & analytics

We measure traffic ourselves rather than handing you to a third party. There are no advertising cookies, no ad networks and no cross-site tracking.

A first-party cookie (rf_vid, twelve months) gives your browser a random id so we can tell a returning visitor from a new one. A second id lives in your browser session only and resets after thirty minutes of inactivity.

For each page you open we record the path, the website you arrived from, your device type, and an approximate city, region and country that Cloudflare derives from your connection. We never store your IP address, and none of this is linked to your name unless you separately fill in the onboarding.

If your browser sends a Do Not Track signal we record nothing at all. Progress in the onboarding is kept in your browser’s local storage so you can resume later.