Privacy

These public pages

The pages anyone can read — this one, the home page, the booking guide and the questions — hold no personal data at all, and they do not collect any. There is no analytics, no tracking pixel, no advertising tag, no embedded font and no third-party script of any kind. Nothing on this site is loaded from another company's server.

That is not only a policy. These pages are rendered without a single call to the application that holds the data, so there is no route by which a name or a phone number could reach them, and an automated test fails the build if that ever changes.

One cookie exists and it is optional: choosing a light or dark theme stores that choice so the next page you open matches. It contains the word light, dark or system and nothing else, and it identifies nobody.

The invite-only side

Behind the sign-in, this tool holds what it needs to ask a café for a table on a named person's behalf: their name, the phonetic reading of it, an email address, a phone number, and which dates and party sizes they asked for. Everyone whose details are in there put them in themselves, for an outing they are attending.

It is not sold, not shared, and not used for anything but arranging those bookings. It is not published anywhere, and every page behind the sign-in is marked as not to be indexed and returns nothing at all to a visitor who is not signed in.

Sign-in is delegated to Google, so this site never sees or stores a password.

Erasure

Anyone whose details are held can ask to see exactly what is stored about them and have it erased. Erasure is refused in one situation only: while a live reservation is still held in that person's name and could still be cancelled, because cancelling it needs details that erasing would destroy. Once the booking is over or cancelled, erasure proceeds.

Ask whoever invited you.