Privacy

Who we are

Compera Menu (menu.compera.co.uk) is run by Compera Ltd, trading as Compera Digital, a company registered in England and Wales (company number 12265681). Registered office: 276 Chase Road, Suite 7-0288 Lonsto House, London, England, N14 6HA. Contact: [email protected].

Restaurants use Compera Menu to publish their menus and allergen information. This page explains what personal data the service handles and why.

Restaurant accounts

When you have an account we keep your name, your email address, the restaurants you belong to and your role. If you sign in with a password, we store only a secure hash of it.

Sign in with Google. If you choose “Continue with Google”, Google tells us your Google account ID, name, email address and profile photo address. We ask only for these basic sign-in details (the openid, email and profile scopes). We use them only to sign you in, to link you to your restaurant and to show your name and photo inside the app. We cannot see your Google password, Gmail, Drive, contacts or anything else in your Google account. We do not sell this data, share it with anyone, or use it for advertising.

Compera Menu’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Menus and uploaded files

Restaurants enter their menus, prices and allergen information, and can upload a PDF, photo or spreadsheet of a menu to import it. Uploaded files are stored on our server with the import record. To read the menu from the file, we send it to OpenRouter, Inc., which passes it to an AI model provider (currently Google’s Gemini) to return the text. Menu files should not contain personal data.

Published menus are public: anyone with the link can see them.

Guests viewing a menu

You do not need an account to view a menu, and menu pages set no cookies and use no analytics. The allergens you choose to filter stay in your browser and are not sent to us. Menu pages load the Inter font from Google Fonts, so your browser connects to Google to fetch it.

Cookies and logs

The signed-in area uses one strictly necessary session cookie (cm_sess) that ends when you close your browser or sign out. Like every website, our server logs each request: IP address, date and time, page, referring page and browser. We keep failed sign-in attempts with the IP address for 15 minutes to stop password guessing.

Where the data is kept

Compera Menu runs on our own dedicated server in a UK data centre (UK Dedicated Servers Ltd, Coventry), which we manage ourselves. The domain’s DNS and traffic go through Cloudflare, Inc., which processes IP addresses and request details to protect and deliver the site.

How long we keep it, and your rights

We keep account data and uploaded files while the restaurant uses Compera Menu, and delete them when the account is closed or when you ask. Our legal basis is the contract with the restaurant and our legitimate interest in running and securing the service.

Under UK data protection law you can ask to see, correct or delete your data, or object to how we use it. Email [email protected]. You can also complain to the Information Commissioner’s Office (ico.org.uk).

To remove Compera Menu’s access to your Google account, open your Google account’s third-party connections.