Effective Date: January 1, 2026 · Last Updated: October 14, 2026
Summary: MV Restaurants uses analytics only if you accept them, and stores some of your preferences locally on your device. If you subscribe to the newsletter, send us a message or send us a photo, we keep what you gave us and a record of the permission you gave with it. We do not sell your personal information. If the Site is ever sold, your data may transfer to the new owner, and if you are a subscriber, you will be told and can leave in one click before anything changes.
MV Restaurants ("the Site," "we," "us," or "our", which includes any future owner or operator of the Site, see Section 9) collects certain information to improve the user experience and analyze how the Site is used. The information we collect falls into the following categories:
Our hosting and security providers (Vercel and Cloudflare) receive standard request information, including your IP address and browser type, whenever your browser loads a page. That is how any website reaches you.
If you press "Accept" in the cookie banner, we also collect the following through Google Analytics and our own page-view counter (Section 1.5). If you press "Reject," or your browser sends a Global Privacy Control or Do Not Track signal and you have not accepted, none of this is collected:
If you subscribe to our newsletter, we collect and store:
The consent record exists so we can demonstrate that every address on our list asked to be there. We keep a hash of your IP address rather than the address itself, so the record proves the subscription happened without storing the identifier.
The newsletter uses double opt-in: nothing is sent to you until you click a confirmation link. An address that never confirms never receives mail, and is deleted after 30 days. Every email carries a one-click unsubscribe link.
If you submit a photo through /submit-photo/, we collect the image file, the caption and restaurant you attach to it, the name you want credited, your email address, and the same kind of consent record described above, including the exact version and a cryptographic hash of the permission wording you agreed to.
Your browser strips the photo's embedded metadata (including GPS coordinates and device identifiers) by re-encoding the image before it is uploaded, so that information never reaches us.
Your email address is used only to contact you about that photo, and is not added to the newsletter unless you separately ask. What we may do with the photo itself is set out in the permission wording shown on the submission page, which is versioned and stored alongside your submission. The receipt we email you carries a link that withdraws the photo at any time.
The Site uses your browser's built-in localStorage feature to save preferences locally on your device. This data is never transmitted to our servers. Locally stored data may include:
This data remains entirely on your device and is under your full control. You can clear it at any time through your browser settings.
If you accept analytics, the Site also records each page view in our own database: the page, the restaurant page if any, the address of the page that sent you, your browser's user-agent string, and a random session number that your browser keeps only until you close the tab. It does not record your name, email address or IP address.
If you use the contact form or the claim page, we keep what you send: your name, email address, your role if you give it, the restaurant and topic, your message, and any optional details such as a phone number or town. We also keep a one-way hash of your IP address and your browser's user-agent string, which help us spot abuse. We use this to read and answer your message, check and make corrections, and keep a record of the changes we made. We email you a copy as a receipt; you are not added to any mailing list.
We use Google Analytics, a web analytics service provided by Google LLC ("Google"), to understand how visitors use the Site. It runs only after you accept analytics in the cookie banner. Google Analytics then uses cookies and similar technologies to collect data such as how often users visit the Site, which pages they visit, and what other sites they visited prior to visiting our Site.
We use the information we receive from Google Analytics to improve the Site and our content. We do not send Google your name or email address, and we have not linked Google Analytics to any advertising product.
For more information: Google Privacy Policy · Google Analytics Opt-out
We do not use advertising pixels, session recording or cross-site tracking. If we ever add an analytics or measurement tool, we will update this policy before it goes live.
We use the information we collect for the following purposes:
We do not sell, rent, or trade your personal information to third parties for their marketing purposes. We may share data in the following limited circumstances:
The following providers process data on our behalf, or receive a request directly from your browser when you load a page. Each is bound by its own privacy terms. This list is kept current; if it changes materially, this policy is updated.
| Provider | What it does | What it sees |
|---|---|---|
| Vercel Inc. | Hosting and content delivery | Standard server request logs, including IP address |
| Cloudflare, Inc. | Domain name service, security and content delivery in front of the Site | Standard request information, including IP address |
| Neon Inc. | Database (newsletter list, photo submissions, messages, page-view counts, consent records) | The data described in Sections 1.2, 1.3, 1.5 and 1.6, stored at rest |
| Resend (Plus Five Five, Inc.) | Sends our confirmation emails, receipts and newsletter | Recipient email addresses and message contents |
| Google LLC | Google Analytics | Usage data (Section 2) |
| OpenStreetMap Foundation | Map tile images | Tile requests from your browser, including IP address, when you view a map |
The mapping library (Leaflet) and both webfonts are served from our own domain rather than third-party CDNs, so loading a page discloses nothing to their publishers.
We do not use Google Tag Manager, advertising pixels, session recording, or cross-site behavioural tracking. The contact form and the claim page post to our own server, not to a form service.
The Site contains links to restaurant websites, ordering platforms, mapping services, and other third-party services. We are not responsible for the privacy practices or content of these external websites. We encourage you to review the privacy policy of any site you visit through our links.
The Site is a general-audience informational directory and is not directed at children under the age of 13 (or 16 in jurisdictions where applicable). We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child, we will take steps to delete such information promptly.
m => m + '\nIf a security incident affects your personal information, we will notify you, and the authorities where the law requires it, including under Massachusetts law (M.G.L. c. 93H), as soon as we reasonably can.
'MV Restaurants is a business, and a business can be sold. If the Site, its domain names, its content, its intellectual property, or the business operating it is sold, merged, acquired, reorganised, or otherwise transferred to a new owner or operator, in whole or in part, including as part of a bankruptcy or insolvency proceeding, the following applies.
All data described in this policy may be transferred to the new owner or operator as part of the transaction, or disclosed to a prospective buyer during due diligence. That includes analytics data, the newsletter list together with its consent records, photo submissions together with the permission records attached to them, and associated business records.
Any disclosure to a prospective buyer before a transaction completes is made under a written confidentiality agreement, limited to what is needed to evaluate the business, and does not permit that party to contact you.
A change of ownership is not a licence to start doing something different with your data. From the effective date of the transfer:
If you are a newsletter subscriber, we will email you before, or as soon as reasonably practicable after, a change of ownership takes effect. That email will name the new operator and carry a one-click unsubscribe link. If the new owner intends to use your data for a materially different purpose than the one you signed up for, they must tell you and obtain your consent before doing so.
For other visitors, notice of a change in ownership will be posted on this page with an updated "Last Updated" date, and continued use of the Site after that date constitutes acceptance of the new operator's policy.
Following a completed transfer, the new owner or operator is responsible for its own data practices, and the previous owner is released from responsibility for anything the new owner does after the effective date. Nothing in this section limits any liability of the previous owner for its own conduct before that date, or waives any right you hold under applicable law that cannot be waived by agreement.
This section survives any termination or modification of this policy.
In plain terms: the list and the archive can be sold along with the guide, because that is how a business like this changes hands. What cannot be sold is your ability to get out. If ownership changes, you get an email saying so and a link that removes you, before anyone uses your address for anything new.
Wherever you live, you can ask us what personal information we hold about you, ask us to correct it, or ask us to delete it. Write to us through the contact form or at the address in Section 14. We will answer within 45 days, and we will not treat you differently for asking. We may need to confirm that the request comes from you, and we keep the suppression and consent records described in Section 12 where we need them to honor an unsubscribe or prove a permission. If the law where you live gives you further rights, we will honor those too.
If you are located in the EEA, you have the right to access, rectify, erase, restrict processing of, and port your personal data. You also have the right to object to processing and to lodge a complaint with your local data protection authority. To exercise these rights, please contact us at the address below.
If you are a California resident, you have the right to know what personal information we collect, request its deletion or correction, and opt out of its sale or sharing. We do not sell or share personal information for cross-context behavioural advertising, and we do not use or disclose sensitive personal information for purposes requiring a right to limit.
A transfer of personal information to a successor as part of a merger, acquisition, or other transaction in which that successor assumes control of all or part of the business is not a "sale" under the CCPA, provided the successor's use of that information remains consistent with this policy. Section 9 is written to keep it consistent, and to give subscribers notice and an exit if it ever would not be.
To exercise your rights, please contact us at the address below. We will not discriminate against you for doing so.
Data collected through analytics services may be processed in countries outside your country of residence, including the United States. By using the Site, you consent to the transfer of your information to countries that may have different data protection laws than your country of residence.
We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. Any changes will be posted on this page with an updated "Last Updated" date. Continued use of the Site after changes constitutes acceptance of the updated policy. Material changes may be communicated through a notice on the Site.
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:
Contact: Use the contact form, or email contact@mvrestaurants.com.