Privacy statement

Last updated 26 August 2026

Find My Bite is a map-first guide to neighbourhood restaurants. We keep the amount of personal data we handle deliberately small, and we don't sell it or use it for advertising. This statement explains what we collect, why, and what you can do about it. It is written to meet our obligations under the EU General Data Protection Regulation (GDPR / AVG). The rules for using the site itself are in our terms of use.

Who is responsible for your data

Find My Bite is the controller for the personal data described here. For any privacy question or request you can reach us at hello@findmybite.com.

What we collect and why

Browsing the map and the directory. You can use almost all of Find My Bite without an account. To keep the service running and understand how it's used, we process a limited amount of technical data — your IP address, the pages you view, and which outbound links (a restaurant's website, menu, booking page or directions) you click. This helps us keep the map accurate, spot broken links, and show restaurant owners how much interest their listing gets.

Accounts. If you create an account or save favourites, we process your email address and the restaurants you save, through our authentication and database provider (Supabase). Restaurant owners who claim a listing also provide contact details for that business.

Getting in touch. If you email us a suggestion or correction, we keep that message and your email address for as long as we need to act on it and reply.

Cookies and similar technologies

We use only strictly necessary and first-party analytics storage — no advertising or cross-site tracking cookies, and we do not share your data with third parties for their own purposes.

Strictly necessary. When you sign in, we store your login session in your browser's local storage (not a cookie) so you stay signed in between visits. We also remember a few preferences on your device — the restaurants you save while signed out, your last map position, and your chosen sort order — so the site behaves the way you left it. All of this is first-party, is never sent to anyone else, and exists only to provide features you asked for, so it needs no consent. Clearing your browser storage removes it.

Analytics and audience measurement. We use Vercel Web Analytics and Speed Insights, which measure page views and performance without cookies and without tracking you across other websites. To count how many outbound link clicks (a restaurant's website, menu, booking page or directions) a listing gets, and roughly how many distinct visitors those clicks come from, we store nothing on your device at all. Instead our server turns your IP address and browser type into a one-way daily code that cannot be traced back to you and is not kept as an IP address. That code is rebuilt from scratch every day, so it can't be used to follow you from one day to the next — it only lets us count unique visitors within a single day, in aggregate, for us and for restaurant owners.

Legal basis

We rely on our legitimate interest (Art. 6(1)(f) GDPR) in operating, securing and improving the service for the technical and analytics data above, having weighed it against your privacy; on the performance of a contract (Art. 6(1)(b)) for accounts and saved favourites; and on your consent (Art. 6(1)(a)) where we ever ask for it. Should we introduce tracking that isn't strictly necessary and doesn't qualify as privacy-friendly analytics, we will ask for your consent first.

Who we share it with

We do not sell your data. We share it only with the providers that run the service on our behalf — our hosting and analytics provider (Vercel) and our database and authentication provider (Supabase) — each acting as a processor under a data-processing agreement. Aggregate, non-identifying click statistics are shown to the owner of the relevant restaurant listing.

How long we keep it

Account data is kept until you delete your account, which you can do yourself at any time from your account settings. Deletion is immediate and permanent. Link-click data is kept for at most 12 months and is never used to build a profile of you. Emails you send us are kept until they are no longer needed to handle your request.

Your rights

Under the GDPR/AVG you can request access to your data, correction, deletion, restriction, or a copy in a portable format, and you can object to processing based on legitimate interest. If you have an account you can exercise two of these yourself, straight away, from your account settings: Download my data gives you a machine-readable copy of everything linked to your account, and Delete your account erases it permanently. For anything else, email us at hello@findmybite.com and we'll respond within one month. You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at autoriteitpersoonsgegevens.nl.

Changes to this statement

We may update this statement as the service evolves. When we do, we'll change the "last updated" date above, and for material changes to how we use your data we'll make it clear on the site.