Privacy notice.

Last updated November 2026.

Draft for owner and legal review. It describes how the software actually works; it is not a claim of compliance with any specific law.

Guests ordering at a table

You do not create an account or give your name, phone number or card details to order. When you scan a table code we create an anonymous table session in a secure, HttpOnly cookie that lasts up to 2 hours. Orders you place are linked to that session and to a separate tracking cookie that lets this phone follow its own orders for up to 24 hours. Other guests at the same table cannot see your orders.

Your order contents, notes and timing are shared with the restaurant to prepare and serve your food. Please do not put personal or sensitive information in order notes.

Restaurants and staff

For each restaurant we store the business name, menu, tables, staff usernames and roles, orders and subscription records. Staff passwords are stored only as Argon2id hashes. Owner contact details, private addresses and payment notes are encrypted with per-restaurant keys.

Website contact form

When you ask us to activate Dineqora we store your name, venue, contact details and message so we can reply. Contact details are encrypted. We use Cloudflare Turnstile to block automated spam.

Where data is processed

Dineqora runs entirely on Cloudflare (Workers, D1, R2, Durable Objects). We do not use third-party analytics, advertising trackers or hosted fonts.

Retention

Staff sessions are removed 7 days after they expire. Order, audit and billing records are kept for 365 days by default, pending owner and legal review. Order exports are deleted after 24 hours. Encrypted backups are kept for 30 days.

Your choices

Restaurants can ask us to export or remove their data, subject to records we must keep for billing and security. Guests can clear the Dineqora cookies from their browser at any time.

Contact

Use the contact form for privacy questions.