privacy-with-accounts.html for when that feature returns.ReviewU helps you find restaurants that match your taste, by asking you to choose between pairs of places rather than by showing you star ratings. This notice explains what happens to your data when you use it.
ReviewU does not have accounts, and it never asks for your email address. The only name it ever asks for is an optional first name when you plan a meal with others (see “Going together” below), and that name never reaches our servers. There is nothing to sign up for and nothing to sign out of. We hold no contact details for anybody, and we could not email you if we wanted to.
Everything that makes the site feel like yours lives in your own browser, in localStorage, not in cookies and not on our servers:
reviewu_anon, a random label such as guest-k3f9x1a2, which names your saved profile on this device. It never leaves your browser.reviewu_profile_<label>, your most recent taste signature, so the site can show it again without asking you to redo the quiz.reviewu_places, the restaurants you have marked as visited and the comparisons you made between them.reviewu_saved, the restaurants you have saved to go to. This list stays in your browser and is never sent anywhere.reviewu_me and reviewu_myname, a random label and the first name you typed (if any), so a group link knows which seat is yours.reviewu_seen, the time of your last visit, so we can count returning visits as a number. The time itself is never sent.These are strictly necessary to provide the features you asked for. Clearing your browser data deletes them, and that is the whole of it: there is no server copy to come back and haunt you.
When you finish the quiz we store your nine answers (the seven this-or-that questions, the occasion and the one thing you said you would not give up), the three confirming pairs you picked between, the taste signature computed from them, and the matches you were shown. If you answer “Does this sound like U?”, or leave a comment, or give a match a thumbs up or down, we store that too.
None of it carries any identifier. The random label above is deliberately not sent. What reaches our database is a set of preferences with nothing attached that could point back to you, to your browser or to your device. We use it for one thing: working out whether the matching is any good, and fixing it where it is not.
ReviewU is hosted by Netlify, and like every website it sits behind a server that records requests, including IP addresses, as part of delivering pages and defending against abuse. The database is hosted by Supabase. Everything else the page needs, the typefaces and the one software library it uses, is served from reviewu.co.uk itself, so loading the site sends your IP address to nobody except our own host and our visit counter (below). We do not read these logs, we do not join them to anything, and we build no profile from them. Netlify and Supabase both publish a Data Processing Addendum incorporating the UK International Data Transfer Addendum.
We do not ask for, and have no use for, your location, your contacts, your payment details or any special category data. We run no advertising, and no analytics beyond the anonymous counter described below. We do not track you across other websites. We do not sell or rent data to anyone. There is no marketing list, because there are no email addresses.
To know whether ReviewU is any use, we count visits and a handful of steps, such as “quiz started”, “quiz finished”, “group link opened” or “menu link opened”. We use GoatCounter, a privacy-friendly counter. It sets no cookies. To avoid counting the same visit twice it combines your IP address and browser type into a session key held in memory for up to 8 hours, and it never stores the IP address or browser type (GoatCounter: sessions and visitors). What we see are totals, never a person. The contents of a group link are never sent: the counter only sees that one was opened.
When you plan a meal with others, each person’s taste signature (the character, seven numbers and how much each one matters), any vegetarian or vegan choice, the cuisines they love or would rather skip, and the first name they chose to type travel inside the link itself. ReviewU stores nothing about the group, and nobody sees anyone’s individual answers. Anyone who has the link can see the names and characters on it and add their own taste, so only send it to the people you are eating with.
When you share your list of visited places, the list travels inside the link itself. Anyone who has the link can see the restaurants on it, in your order. The link carries no name, no email and no identifier. We do not publish your list anywhere, and there is no way to browse other people's lists on ReviewU. Treat the link like any other message: only send it to people you want to see it.
Because we hold nothing that identifies you, there is no account to access, correct or close, and we have no way to find “your” records among the anonymous ones. What you can always do is clear your browser data, which removes everything ReviewU has put on your device.
If you believe we hold something about you and you want it dealt with, or you simply want to ask a question about any of this, write to privacy@reviewu.co.uk and we will answer. You also have the right to complain to the Information Commissioner's Office at ico.org.uk.
Accounts may come back later, so that a taste signature can follow you to a different phone or laptop. If that happens we will collect an email address, and this notice will be replaced with one that says so, before the feature goes live rather than after.
Contact: Andrea Simoni, an individual based in London. Write to privacy@reviewu.co.uk