Privacy

You don't need an account to browse or to nominate a restaurant. When you nominate or vote we set one cookie holding a random identifier for your device. It exists solely to stop the same device nominating or voting twice, and it contains nothing about you.

We store which restaurants that identifier picked, and the time. We do not store your name, and we do not build a profile of you.

We store:

• Your email address, so you can sign in and be told when a round opens.
• Your password, hashed with scrypt. We never store it in a readable form and cannot see what it is.
• Which matchups you voted on, and which side you chose.

We never store your IP address. When you vote or sign up we store a salted one-way hash of it, which we use only to stop one person creating many accounts or automating votes. It cannot be turned back into an address.

Every cookie below is one the site can't do its job without, so they're set without asking. None of them track you across other websites, and none are shared with anyone.

• rv_voter— a random device identifier, so one device can't nominate or vote twice. One year.
• session_id — keeps you signed in, if you have an account. Thirty days.
• rv_consent— remembers the cookie choice you made, so we don't ask again every visit. Six months.
• admin_session — only ever set for the people who run the site. Seven days.

Anything beyond that — measuring which pages get visited — we ask first, and it stays off unless you say yes. You can change your answer at any time from the Cookies link in the footer, and refusing costs you nothing: the whole site works either way.

When you do say yes, the measuring is done by Vercel Web Analytics, which counts page views and where visitors arrived from. It sets no cookies and does not follow you to other websites. If you say no, it is never loaded at all — not loaded and switched off, but absent from the page.

• We don't sell or share your data with anyone.
• We don't use advertising cookies, and nothing we use follows you to other websites.
• We don't send marketing email. The only emails are about rounds you asked to hear about.

Vote totals are kept indefinitely — they are the record of who won, and deleting them would erase the results. The link between a vote and a person is not needed once a bracket has finished, so it is removed at that point, leaving the totals intact.

Delete your account and we remove your email, your password hash and your sessions. Votes you cast stay in the totals, unattached to you.

Under UK GDPR you can ask for a copy of what we hold about you, ask us to correct it, or ask us to delete it. Email hello@restaurantversus.co.uk and we'll deal with it within a month.

If you think we've handled your data badly you can complain to the Information Commissioner's Office at ico.org.uk.

Restaurant names and addresses come from OpenStreetMap and the Food Standards Agency's public register, both published as open data. If you run a restaurant listed here and want it removed, email us and we'll take it down.