Eatarian is a restaurant discovery service operated by Fleksa GmbH (“Eatarian”, “we”, “us”). This policy explains what personal data we collect when you use the Eatarian website and app, why we collect it, who we share it with, and the rights you have. We are the data controller for this processing. Questions: hello@eatarian.com.

1. Information we collect

• Searches and browsing — the queries you make and the restaurants and pages you view, so we can show relevant results.

• Approximate location — derived from your IP address to show nearby places. If you grant permission, we may use your device's precise location instead; you can decline or revoke this at any time in your browser/device settings.

• Account information — if you sign in, your email address and a one-time verification code. We create an account keyed to your email and store a signed, httpOnly session cookie to keep you logged in.

• Favorites — restaurants you save, linked to your account.

• Concierge (AI) messages — if you use our AI concierge, the messages you send are processed to generate a response (see “Third parties” below).

• Technical data — IP address (used for security and rate-limiting), device/browser type, and aggregate, cookieless usage analytics.

2. How we use it (and legal bases)

• To provide the service — run searches, show nearby and relevant restaurants, save favorites, and keep you signed in (performance of a contract / our legitimate interest in operating the service).

• To secure the service — prevent abuse and rate-limit requests (legitimate interest).

• To understand and improve the product through aggregate analytics (legitimate interest).

We do not sell your personal data, and we do not use advertising or cross-site tracking cookies.

3. Cookies

We set only the essential cookies the service needs to function — primarily a secure, httpOnly session cookie when you sign in. For analytics we use privacy-friendly, cookieless tools (Vercel Web Analytics and Speed Insights) that measure aggregate traffic and performance and do not set cookies or track you across other sites.

4. Third parties we share data with

• Vercel Inc. — our hosting and cookieless analytics provider, which processes requests and aggregate usage data.

• AI provider — when you use the concierge, your messages are sent to our AI model provider to generate a response. We do not use these messages for advertising.

• Fleksa platform — for restaurant data and, where you choose to order directly, to connect you to the restaurant's ordering page.

These providers act as processors or independent controllers under appropriate data-processing terms. We may also disclose data where required by law.

5. International transfers

Some providers may process data outside your country, including the United States. Where we transfer personal data from the EEA/UK, we rely on appropriate safeguards such as the EU Standard Contractual Clauses.

6. Data retention

We keep account data for as long as your account is active. Search and technical logs are kept only as long as needed for the purposes above and then deleted or aggregated. You can ask us to delete your account and associated data at any time.

7. Your rights

Depending on where you live, you have rights to access, correct, delete, port, and object to or restrict our processing of your personal data (GDPR), and to know about and deleteyour information and opt out of any “sale” of it (CCPA — note we do not sell personal data). To exercise any right, email hello@eatarian.com. You may also lodge a complaint with your local data protection authority.

8. Children

Eatarian is not directed to children under 16, and we do not knowingly collect their personal data. If you believe a child has provided us data, contact us and we will delete it.

9. Changes to this policy

We may update this policy as the service evolves. We'll revise the “last updated” date above and, for material changes, provide a more prominent notice.

10. Contact

Fleksa GmbH — hello@eatarian.com. For our full company details, see our imprint.