Privacy policy

Who is responsible for your data

Martin Iglesias, publisher of toucarte.app (see the legal notice). For any question: [email protected].

What we collect

The website asks for no account or sign-up and has no advertising. We collect what you type into the demo form and, only if you accept, visit statistics:

• your name, restaurant name and email address;
• your phone number, the plan you're interested in, who recommended Toucarte to you and your message, if you provide them;
• the language of the page and, if you came through a sales partner's link, that partner's code.
• if you accept audience measurement: page views, device type, country and where the visit came from (Google Analytics).

Why, and on what basis

• To answer your demo request and get back to you: pre-contractual steps taken at your request.
• To know which sales partner introduced you to Toucarte, so we can calculate their commission: legitimate interest. That partner is told about your request.
• To limit abusive form submissions (3 per hour per IP address): legitimate interest. The IP address is only used for this check and is not stored with your request.
• To measure site traffic and improve the site: your consent, which you can withdraw at any time.

How long we keep it

Your request is kept for 3 years after our last contact, then deleted.

Visit statistics are kept for 14 months.

Who has access

We do, and the technical providers working for us: Railway (hosting, European region), Cloudflare (DNS and network) Resend (sending the email that notifies us of your request) and, only if you accept audience measurement, Google Ireland Limited (Google Analytics). If a provider is located outside the European Union, the transfer is covered by the safeguards provided by the GDPR, including standard contractual clauses. We do not sell your data.

What is stored on your device

The first two items are strictly functional. Audience-measurement cookies are only set after you agree; you can decline or withdraw at any time with the "Cookies" link at the bottom of the page. No advertising cookies. Fonts are served from our own domain, with no calls to Google.

• A "menu_lang" cookie (1 year) that remembers the language you choose. It is only set if you change the site's language.
• In "sessionStorage", the code of the sales partner who sent you the link. It disappears when you close the tab.
• If you accept audience measurement: Google Analytics cookies ("_ga" and "_ga_*"), 13 months at most.

Digital menus

The menu shown at a restaurant table asks for no account or personal data. Visits are counted per day, without IP addresses or identifiers. The selection a guest prepares stays on their phone and clears itself after 2 hours.

Your rights

You can ask for access to your data, its correction or erasure, restriction of processing, or object to it, by writing to [email protected]. If you believe your rights are not being respected, you can lodge a complaint with the CNIL (cnil.fr), the French data protection authority.