Privacy policy

What we collect

From customers: the email address you sign in with, your business name, and the menu content you enter.

From guests visiting a public menu: nothing personal. No analytics scripts, no advertising trackers, no profiling.

Cookies

We set two technical cookies: ma_session (signed-in users only, required to log in) and ma_lang, which remembers the language you chose. Both are strictly necessary for the service, so they do not require consent under Article 5(3) of Directive 2002/58/EC.

Where data lives

Data is stored in Turso (libSQL). The application runs on Cloudflare’s edge network. If you upload photographs, they are stored in Cloudflare Images.

Your GDPR rights

You have the right to access, rectify, erase, restrict and port your data.

Write to atelier.menu@ateliermenu.com and we will respond within 30 days.

Retention

Account data is kept while the account is active. After cancellation we delete it within 30 days. Sessions expire after 30 days.

Security

Passwords are stored only as PBKDF2-SHA256 hashes. Session tokens are stored hashed. All traffic is served over HTTPS.