Privacy

Updated October 16, 2026.

Search, location and local saves

This browser remembers submitted searches, filters, sort, one last-known location and saved places when storage is available. Location is sent to our server to sort distances. Explore URLs can include the search and distance coordinates; anyone receiving one can see them. Restaurant Share links contain only a public restaurant ID. Forget location clears the remembered fix. There is no continuous or background tracking.

Usage and request protection

Production Web Analytics and Speed Insights measure usage and performance. App events contain only categorical values and result-count ranges. Search text, restaurant IDs, coordinates and saved lists are excluded from Analytics data. Do Not Track, Global Privacy Control, previews and automated tests suppress collection. Hosting and bot/rate-limit providers process ordinary request metadata such as IP addresses to serve and protect the app.

Email alerts and contact

Alerts are optional. Setup first sends an email code, then lets you choose settings in the app. No alerts start until you enter the code and choose Turn on alerts. With your permission, Fave/Watch changes on that device then update the monitored list. Your unfinished setup temporarily stores your email and choices in this tab so you can return from email or reload; codes and private email links are not stored in that draft. Confirmed alerts store your email, monitored places and preferences privately; searches and location are excluded. Pause or unsubscribe in email settings. Unsubscribe removes the recipient address and monitored list and revokes private links; limited delivery and rate-limit markers can remain for up to 30 days. Contact reports send the name, email, message and optional public record context you submit to our private inbox. Neon stores alert data, Resend delivers email, and Vercel hosts the app.

Optional Google customer ratings

When Google customer ratings are available, bringing the detail’s Google section into view sends the selected public restaurant ID to our server once. Failed loads can be retried explicitly; browsers without visibility detection have a manual load button. We resolve its captured business name and full postal address and request an exact business match and rating from Google Places. We do not send Google your search text, GPS coordinates, saved places, email or account credentials. Google receives our server request and ordinary service metadata. IP-based bot checks and throttles protect this optional lookup; an alert subscription is not required.

Only the Google Place ID association and a fingerprint of the public captured identity are stored. Ratings, counts, Google addresses and attribution payloads are not saved in the catalog, database, browser storage or service-worker cache. The loaded rating stays in memory for the current detail view, including when you open Maps and return. Closing details, reloading the page or changing the captured business identity clears it. The view shows its load time and has no refresh control. Repeated scrolling, returning to the foreground and failed attempts do not retry automatically. A new visible detail after closing or reloading can request a fresh result. Our provider responses use private, no-store caching. Opening a Google Maps link sends you to Google, whose own policies apply. See the Google Privacy Policy.

Optional ChatGPT connection

The read-only KitchenGrade MCP connection searches public restaurant records and retrieves grades by public establishment ID. ChatGPT sends the search terms, optional city/county filters or establishment ID needed for a tool call to KitchenGrade. Use public restaurant names and addresses, not personal details. The connection does not read your saved restaurants, email, alert subscriptions or device location, and it cannot submit reports or change grades. Ordinary hosting request metadata is processed to serve these requests. Your ChatGPT conversations and account settings are handled by OpenAI. See the ChatGPT setup guide.

WaterGrade and external links

WaterGrade taste badges use public restaurant IDs and exact public identity snapshots, without credentials, search text, GPS, saved categories or referrer. WaterGrade receives ordinary network metadata. Taste scores are separate from inspection grades. External Maps, report and rating links open their respective providers without the app's referrer.

To report an app error or ask about your information, use Contact.