Last updated October 18, 2026

EthnoEats (operated by Chris Peter, Urbana, Illinois) ("EthnoEats", "we") runs ethnoeats.com. This policy explains what we collect, why, who we share it with, and the choices you have. We keep it short and in plain language.

Account data: your email address and password (the password is hashed by our sign-in provider; we cannot read it). Subscription data: whether you are subscribed, your billing period and any referral credit. Use data: which restaurant discounts you redeem and when, the restaurants scheduled for you, and your referral ID and the IDs of people you refer. Waitlist data: if you are a restaurant, the name, email and cuisine you send us. Technical data: standard server logs (IP address, browser type, pages requested) kept by our hosting provider for security.

We do not collect or store your card number; payments are handled by Stripe. We do not collect your precise location. We do not use advertising trackers or analytics cookies.

To create and secure your account; to show you your restaurants for the week; to let a restaurant confirm a valid redemption; to charge your subscription and apply referral credits; to answer support requests; to prevent fraud and abuse; and to improve the service. We use your email to send account messages (confirmation, password reset, receipts). We do not send marketing email without asking you first.

When a restaurant scans your code it sees a short anonymous student ID and the deal. It does not see your name or email.

Only the service providers that run EthnoEats, each under its own privacy terms: Supabase (database and sign-in), Stripe (payments), Cloudflare (hosting and security), Resend (account emails) and Google Workspace (our support inbox). We give partner restaurants redemption counts so they can be paid. We may disclose information if the law requires it or to protect people from fraud or harm. We do not sell or "share" your personal information for advertising.

We use only what the site needs to work: your sign-in session and, for restaurants, a scanner key stored in your browser. These are strictly necessary, so we do not show a cookie banner. Stripe may set its own cookies on its payment page.

We keep account and redemption data while your account is open. After you ask us to delete your account we remove your personal data within 30 days, except records we must keep for tax, accounting or fraud prevention (for example Stripe payment records).

You can ask us to access, correct, export or delete your personal information at any time by emailing support@ethnoeats.com from the address on your account. You can cancel your subscription yourself in two taps from your dashboard. If you live in California, Illinois or another state with a privacy law, you have the rights that law gives you; we will not treat you differently for using them. If we deny a request you may appeal by replying to our email.

Data is encrypted in transit (HTTPS). Database access is restricted by row-level security so students can only read their own records. No system is perfectly secure; if a breach affects you we will tell you as the law requires.

EthnoEats is for people 18 and older. We do not knowingly collect information from anyone under 18. If you think a minor has given us information, email us and we will delete it.

If we change this policy we will update the date above and, for material changes, email account holders.

support@ethnoeats.com