Privacy
Menurea builds and hosts digital menus for restaurants. This page explains what I collect, why I collect it, and how long I keep it. It covers menurea.com and the menu pages I host at menurea.com/r/.
Who is responsible
Menurea is a personal project run by one person, Rinor Ambari, based in North Macedonia — not a company. That makes me the data controller for everything described here. For any question about this page or your data, use the contact form on the home page and it reaches me directly.
If you are a restaurant owner
When you enquire or become a customer, I hold:
- What you send me. Your name, restaurant name, email address, phone number if you give one, and the content of your message. I use this to reply and to prepare a quote.
- Your account. Your email address, used to sign you in. Authentication is handled by Supabase; I never see or store a password.
- Your menu. Everything you ask me to publish — dish names, descriptions, prices, opening hours, contact details, and any photography you supply. This is published by design.
- Billing state. Which plan you are on, when your trial ends, and whether payment is due.
The lawful basis is performance of my agreement with you, and my legitimate interest in replying to enquiries.
If you are a diner
You do not need an account, and I do not ask you for anything. Viewing a menu does not require you to identify yourself, and I do not use advertising or tracking cookies on menu pages. The host records standard server logs, including IP address, for security and to keep the service running.
Cookies
There is one kind of cookie: the session cookie that keeps a restaurant owner signed in to their dashboard. It is required for the dashboard to work and is not used to track you across other sites. There are no analytics or advertising cookies.
Who else processes your data
- Vercel — hosting and server logs.
- Supabase — database, authentication, and storage for uploaded images. Hosted in the EU.
- Resend — sending email: enquiry notifications, sign-in links, and account notices.
Each acts on my instructions under a processing agreement. I do not sell your data, and I do not share it for advertising.
How long I keep it
Menu content and account records are kept while your account is active and for 12 months afterwards, so a returning customer does not have to start again. Enquiries that do not become accounts are kept for 12 months. Server logs are kept for the period the host retains them. You can ask me to delete anything sooner.
Your rights
You can ask for a copy of your data, ask me to correct it, ask me to delete it, or object to how I use it. Write to me through the contact form and I will respond within 30 days. If you are not satisfied, you can complain to the Agency for Personal Data Protection of the Republic of North Macedonia.
Changes
If this page changes materially, I will update the date at the top and, for customers, say so by email.