Legal

Privacy Policy

Draft · last updated 15 SEPTEMBER 2026
Before this goes liveThis notice describes the site as it runs today, with accounts switched off and no email address collected from anybody. It has been checked line by line against the code. It is still not legal advice: have a solicitor or a UK GDPR specialist read it before U rely on it. The longer version covering accounts is kept as privacy-with-accounts.html for when that feature returns.

ReviewU helps you find restaurants that match your taste, by asking you to choose between pairs of places rather than by showing you star ratings. This notice explains what happens to your data when you use it.

The short version

ReviewU does not have accounts, and it never asks for your email address or your name. There is nothing to sign up for and nothing to sign out of. We hold no contact details for anybody, and we could not email you if we wanted to.

What stays on your device

Everything that makes the site feel like yours lives in your own browser, in localStorage, not in cookies and not on our servers:

These are strictly necessary to provide the features you asked for. Clearing your browser data deletes them, and that is the whole of it: there is no server copy to come back and haunt you.

What we do record, anonymously

When you finish the quiz we store your twelve choices, the taste signature computed from them, and the matches you were shown. If you answer “Does this sound like U?”, or leave a comment, or give a match a thumbs up or down, we store that too.

None of it carries any identifier. The random label above is deliberately not sent. What reaches our database is a set of preferences with nothing attached that could point back to you, to your browser or to your device. We use it for one thing: working out whether the matching is any good, and fixing it where it is not.

Server logs

ReviewU is hosted by Netlify, and like every website it sits behind a server that records requests, including IP addresses, as part of delivering pages and defending against abuse. The database is hosted by Supabase, and one software library is delivered by jsDelivr, which receives the IP address of that request. We do not read these logs, we do not join them to anything, and we build no profile from them. Netlify and Supabase both publish a Data Processing Addendum incorporating the UK International Data Transfer Addendum.

What we never do

We do not ask for, and have no use for, your location, your contacts, your payment details or any special category data. We run no advertising and no analytics. We do not track you across other websites. We do not sell or rent data to anyone. There is no marketing list, because there are no email addresses.

Sharing a list

When you share your list of visited places, the list travels inside the link itself. Anyone who has the link can see the restaurants on it, in your order. The link carries no name, no email and no identifier. We do not publish your list anywhere, and there is no way to browse other people's lists on ReviewU. Treat the link like any other message: only send it to people you want to see it.

Your rights

Because we hold nothing that identifies you, there is no account to access, correct or close, and we have no way to find “your” records among the anonymous ones. What you can always do is clear your browser data, which removes everything ReviewU has put on your device.

If you believe we hold something about you and you want it dealt with, or you simply want to ask a question about any of this, write to privacy@reviewu.co.uk and we will answer. You also have the right to complain to the Information Commissioner's Office at ico.org.uk.

If this changes

Accounts may come back later, so that a taste signature can follow you to a different phone or laptop. If that happens we will collect an email address, and this notice will be replaced with one that says so, before the feature goes live rather than after.

Contact: Andrea Simoni, an individual based in London. Write to privacy@reviewu.co.uk