Privacy policy

Last updated October 18, 2026

This policy explains what personal data Dishfolio processes, why, and what choices you have. It covers restaurant customers who use the Dishfolio dashboard, and guests who view menus published with Dishfolio.

Guests viewing a menu

Menus work without cookies and without an account. To count visits we compute pseudonymous identifiers by hashing your IP address and browser user agent with a secret that changes every day. The IP address itself is never stored, and identifiers can’t be linked across days. If your browser sends Do-Not-Track or Global Privacy Control, no analytics events are recorded at all.

If you place an order at a table, we store the items, options and notes you entered and the table it came from. We don’t ask for your name, email or payment details.

Your chosen language and your last order are kept in your browser’s local storage so the menu remembers them. You can clear them at any time in your browser settings.

Visitors to our website

On dishfolio.app we count page views and clicks on sign-up buttons the same way: no cookies, a daily-rotating hash instead of your IP address, plus the referring website and any campaign tags in the link. Do-Not-Track and Global Privacy Control turn this off.

Restaurant accounts

We process your name, email address, password (stored only as a hash; or, if you sign in with Google, your Google account ID, name and email, but never your Google password) and the content you create: restaurants, menus, images and translations. Subscriptions and payments are handled by our merchant of record, Polar. We receive your subscription status but never your card details.

When you import a website or PDF, we fetch and store the content you provide so you can review the import. Import sources are deleted after 90 days.

Processors

We use carefully selected providers for hosting and storage, payments (Polar), transactional email and AI processing (for translations and imports you request). AI providers receive only the menu text or images needed for the task.

Retention

Raw analytics events are deleted after 30 days. Aggregated, anonymous statistics are kept for up to 400 days. If an organization is deleted, its data goes offline immediately and is permanently purged after 30 days.

Your rights

You can access, export and delete your account data from your dashboard settings, or contact us at privacy@dishfolio.app. You also have the right to lodge a complaint with your local data protection authority.