Skip to main content
← Back to home

Privacy Policy

Last updated: May 2026

1. Data controller

The website wheretoeatvegan.now is published as a personal project. For any question relating to the protection of your data, contact us at: contact@wheretoeatvegan.now

2. Data collected

We only collect strictly necessary data:

  • User account: email address and password (encrypted), or Google OAuth identifier. Required for account management.
  • Favourites: list of restaurant IDs you add to your favourites.
  • Suggestions and corrections: restaurant name, address, type; optional email for follow-up.
  • Reviews: first name, rating and review content, optional photos.
  • Reports: reason, details and optional email.

3. Purposes and legal basis

Processing is based on the following legal grounds:

  • Performance of a contract (Art. 6.1.b GDPR): account management, displaying your favourites.
  • Legitimate interest (Art. 6.1.f GDPR): improving the guide through suggestions, reports and corrections.
  • Consent (Art. 6.1.a GDPR): sending follow-up emails if you provided your address.

4. Data retention

  • Account data: account lifetime + 12 months after deletion.
  • Favourites: automatically deleted when the account is deleted.
  • Reviews, reports, suggestions: 3 years from submission.

5. Subprocessors

Data is hosted by:

  • Supabase Inc. (database and authentication) — hosted in Europe (Frankfurt).
  • Vercel Inc. (web hosting) — 340 Pine Street Suite 701, San Francisco, CA 94104.

These subprocessors have appropriate safeguards for transfers outside the EU (standard contractual clauses).

6. Analytics

This site uses Umami, a cookie-free analytics tool that does not collect full IP addresses and is GDPR-compliant. No personal data is shared with third parties for advertising purposes.

7. Your rights

Under the GDPR (Arts. 15–22), you have the following rights:

  • Right of access to your data
  • Right to rectification
  • Right to erasure (“right to be forgotten”)
  • Right to data portability
  • Right to object and to restriction of processing

To exercise these rights, send an email to contact@wheretoeatvegan.now. We respond within 30 days.

You may also lodge a complaint with your national data protection authority (in France: CNIL).

8. Cookies

This site uses no tracking or advertising cookies. A technical cookie (country) is used to detect your country and display the appropriate language. It contains no personal data.