PRIVACY POLICY
What we collect, and what we never do with it
- 1 What we collect from kitchens
- 2 What we collect from customers
- 3 Who sees an order
- 4 What we never do
- 5 The three companies in the middle
- 6 Cookies and sessions
- 7 How long we keep things
- 8 Getting your data, and deleting it
- 9 Children, security and changes
SECTION 1What we collect from kitchens
If you open a kitchen, we hold what is needed to run it:
- Your email address. This is how you sign in. There is no password: we email you a six digit code.
- A second email address, if you want one, for order notifications to land somewhere other than where you sign in.
- Your kitchen's public details. Name, link, tagline, logo, phone number, pickup area, pickup notes, opening state, color and how much notice you need. All of this is public by design: it is your storefront.
- Your menu. Dish names, descriptions, prices, categories, option groups, photographs and stock counts. Also public.
- Your orders, and the customer details attached to them. See section 3.
- Your timezone, read once from your browser so that a pickup time in an email is the right time.
- Billing records. Which plan you are on, what each cycle came to, whether it was paid, and the brand and last four digits of the card that pays it. We never hold a card number. Stripe holds the card; we hold a reference to it.
SECTION 2What we collect from customers
Ordering never requires an account. When you place an order, the kitchen needs to know who is collecting it, so the checkout asks for:
- Your name, so the kitchen can call it out at pickup.
- Your phone number, so the kitchen can reach you if something is wrong with your order.
- Your email address, which is optional. It is only used to attach this order to an account, if you ever make one, so that your order history follows you. You can order without it and nothing about the order changes.
- What you ordered, any options you picked, any note you wrote, and the pickup time you chose.
If you do make a customer account, we hold your email address, the kitchens you saved, and the orders you have claimed. That is all of it.
If you rate a kitchen, we hold the rating, any comment you wrote, and a one-way fingerprint of your order so the same order cannot be rated twice. A rating is shown with no name attached to it.
If you report a kitchen, we hold the reason, anything you wrote, and a one-way fingerprint used only to stop the same person filing the same report over and over. Reporting does not require an account and we do not tell the kitchen who reported it.
SECTION 3Who sees an order
A kitchen sees the full details of its own customers' orders, and nobody else's. That means your name, your phone number, your email address if you gave one, exactly what you ordered including your options and your note, your pickup time, and the order's history. They need all of it to cook the right thing and hand it to the right person.
A kitchen never sees an order placed with any other kitchen. One kitchen cannot see another kitchen's customers, menu performance or sales.
Order details are not public. The order status page is reachable only with a random token that is generated for that one order and is not guessable.
SECTION 4What we never do
We never sell your personal information. We never rent it, we never trade it, and we never share it with anyone for advertising, for marketing or for building a profile of you.
There is no advertising network, no analytics service, no session recorder, no social media pixel, no font CDN and no third party script of any kind in this product. Every font, every script and every stylesheet is served from our own domain. This is checkable: open the network tab on any page here and count the hosts.
We do not send marketing email to customers. The only emails we send a customer are ones they asked for. The only emails we send a kitchen are its sign-in codes, its order notifications, which it can switch off, and its bills, which it cannot.
SECTION 5The three companies in the middle
Running this needs a few suppliers. They are processing data on our instructions, not collecting it for themselves:
- Cloudflare hosts the service, the database and the uploaded photographs, and sees the traffic that reaches it.
- Resend delivers our email, and so handles the address a message is going to and what is in it.
- Stripe handles billing for kitchens. Card details are typed on Stripe's own page and go straight to Stripe. They never touch our servers and are never in our database.
We may also disclose information if the law requires it, or to protect somebody's safety. If a kitchen is reported for unsafe food, we may pass what we hold to the relevant health authority.
SECTION 6Cookies and sessions
We use exactly one cookie, and only if you sign in. It holds a random session token, nothing else. It is not readable by scripts, it is only sent to our own domain, and it expires after thirty days. Signing out deletes it on the spot.
There are no advertising cookies, no analytics cookies and no third party cookies, so there is nothing here to consent to or opt out of.
The kitchen app stores a small amount in your browser so that it works when your signal drops: the page itself, the fonts and the stylesheet. That is a cache on your own device and it is not sent anywhere. You can clear it the same way you clear any site's data.
SECTION 7How long we keep things
| What | How long |
|---|---|
| Sign-in codes | Ten minutes, then deleted. A used or expired code is swept out automatically. |
| Sessions | Thirty days, or until you sign out. |
| Orders | Kept while the kitchen exists, because a kitchen needs its own history. Deleted when the kitchen is deleted. |
| Menus and photographs | Until you delete them, or until the kitchen is deleted. |
| Billing records | Seven years after the cycle they belong to. Tax records have to outlive the account. |
| Ratings and reports | Kept while the kitchen exists. |
| Rate limit counters | At most one day. |
| Backups | Deleted content can persist in a backup for up to thirty days before it ages out. |
SECTION 8Getting your data, and deleting it
Email possiblstudio@gmail.com from the address on your account and say what you want. We will answer within thirty days, and it costs nothing.
You can ask us to send you a copy of everything we hold about you, to correct something that is wrong, or to delete your account and everything in it.
If you ordered as a customer and never made an account, we do not have a way to identify you from an email address alone. Send us the kitchen's name, the phone number you gave and roughly when you ordered, and we will find the order and remove your details from it.
Two things survive a deletion request, and only these two. Billing records are kept for the seven years described above, because we are required to keep them. Anything already written to a backup stays there until that backup ages out, within thirty days.
Depending on where you live you may have further rights, including to object to or restrict processing, and to complain to your data protection authority. Ask us and we will help rather than argue.
SECTION 9Children, security and changes
Little Kitchen is not for children under 13, and we do not knowingly collect anything from one. If you think we have, tell us and we will delete it.
Everything is served over HTTPS. Sign-in codes expire in ten minutes and die after five wrong guesses. Session cookies cannot be read by scripts. Card numbers never reach us. No system is perfect, and we will tell you promptly if something happens that affects you.
Our servers and our suppliers are in the United States. If you are somewhere else, your information is processed there.
If this policy changes in a way that matters, we will email account holders before it takes effect.
LAST UPDATED 30 AUGUST 2026
Back to the front page