Your data, plainly.

1. Information we collect

We collect two broad categories of information.

a. Information you provide directly

• Owner accounts. If you claim or list a food truck, we collect your email address, display name, the business details you submit (truck name, location, hours, photos, contact details) and any messages you send us.
• Contact form. If you write to us via the contact page, we receive your message, the email address you provide, and basic metadata about the submission.

b. Information collected automatically

• Usage analytics. Pages viewed, approximate location (city / country derived from IP), device type, browser, referrer, and the time you spent on a page. We use Google Analytics 4 for this.
• Advertising signals. When ads are displayed, our advertising partners (Google AdSense and similar) may set cookies that record general interest categories so they can deliver more relevant ads.
• Server logs. Standard web-server logs (IP address, user-agent, request path, status code) retained for a short period for security and debugging.

2. How we use your information

• To operate, maintain and improve the website and its directory listings.
• To authenticate owner accounts and let owners manage their listings.
• To respond to your messages and support requests.
• To measure traffic, identify popular content and diagnose technical problems.
• To display advertising that helps fund the site.
• To prevent abuse, fraud and policy violations.

We do not sell your personal information. We do not share your contact details with third parties for their independent marketing.

3. Cookies and similar technologies

We use cookies and similar tracking technologies in three buckets:

• Strictly necessary. Required for the site to function — for example, keeping you signed in as an owner.
• Analytics. Google Analytics 4 cookies that help us understand how visitors use the site in aggregate.
• Advertising. Cookies set by Google AdSense and its partners to serve and measure ads, including personalised advertising where you have consented.

You can manage your consent at any time through the cookie banner shown on first visit, your browser settings, and Google's Ads Settings. Blocking cookies may break some site features.

4. Third-party services we use

We rely on a small set of trusted third-party providers:

• Google Analytics 4 — usage analytics. Subject to Google's privacy policy.
• Google AdSense — advertising. Google may use cookies to serve ads based on your prior visits. See how Google uses information from sites that use its services.
• Supabase — authentication and database for owner accounts. Hosted in the United States.
• Resend — transactional email delivery for account verification and notifications.
• Hostinger — web hosting infrastructure.

5. Legal bases (EEA / UK)

If you are in the European Economic Area or the United Kingdom, our legal bases for processing your data are: (a) your consent for analytics and advertising cookies; (b) contractual necessity when you create an owner account or contact us; and (c) our legitimate interests in running and securing the website.

6. Your rights

Depending on where you live, you may have the right to access, correct, delete or export your personal information, to withdraw consent, and to object to certain processing. California residents have additional rights under the CCPA, including the right to opt out of the “sale” or “sharing” of personal information. To exercise any of these rights, email our contact form and identify yourself so we can locate your records.

7. Children

The site is not directed at children under 13 and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it.

8. Data retention

Owner-account records are retained for as long as the account is active, plus a short grace period in case the account is reactivated. Analytics data is retained per Google's default retention period. You can request deletion of your account at any time.

9. International transfers

Our infrastructure providers are based in the United States. If you access the site from another country, your information may be transferred to and processed in the United States. Where required, we use standard contractual clauses or equivalent safeguards.

10. Changes to this policy

We may update this policy from time to time. When we do, we'll change the “Last updated” date at the top of this page. Material changes will be announced via a banner on the site for at least 30 days.

11. Contact

Questions about this policy or your data? Reach us via the contact page. We'll respond within two business days.