Home › Privacy policy

Privacy policy

Last updated September 21, 2026.

Browsing

Reading menus needs no account and sets no cookies. The site keeps no session, so nothing identifies you from one page to the next. There is no analytics script, advertising script or other third-party code on the pages, and no web fonts, images or scripts are loaded from other domains: every request your browser makes to show a page goes to this site.

Like any web server, the server writes an access log with the address of each request, the time, the page requested and the browser's user-agent string. Those logs are used to keep the site running and to find abuse, and are rotated on the usual schedule; they are not joined to any of the data below.

Saved schools

The "My Schools" list in the menu bar is stored in your browser's local storage, on your device only. It is never sent to the server. Clearing your browser's site data removes it, and it does not follow you to another browser or device.

Finding schools near you

"Schools near you" asks your browser for your position, and your browser asks you. Nothing happens unless you allow it. What is sent here is rounded to about a hundred metres - enough to find the school down the road, not the house - and is used to answer that one request: it is not stored, not written to the access log with the answer, and not joined to anything else. The rounded point is kept in your own browser so a later visit does not have to ask again; "Forget it" on the card removes it, as does clearing your site data. The towns and schools are matched here, against a public-domain list of places published by the US Census Bureau - no mapping or geocoding service is involved, and nothing about you reaches one.

Email reminders

If you sign up for a daily or weekly menu email, the server stores:

the email address you entered;
the school and, if chosen, the meal you asked about;
whether you chose daily or weekly;
a random token that identifies the subscription in the confirm and unsubscribe links;
the times you confirmed, unsubscribed and were last sent an email.

Nothing is sent until you click the confirmation link in the first email. The address is used only to send the menu you asked for; it is not sold, shared, or used for anything else, and the emails contain no tracking pixels or click tracking. Every email carries an unsubscribe link that stops further mail at once. An unsubscribed record is kept so the same address is not re-subscribed by mistake; to have it deleted entirely, ask using the contact address below.

Sign-ups are rate-limited by the requesting address, which is held in a short-lived counter for ten minutes and then discarded.

Emails are delivered through a third-party sending service, which processes the recipient address and message on our behalf for delivery only.

Calendar feed and PDF download

The .ics calendar feed is a public address for a school's menu; subscribing to it in a calendar app means the app fetches it periodically, and those fetches appear in the access log like any other request. PDF downloads are generated on the server from the menu and cached for a few hours; nothing about who requested them is stored.

Children

The site is meant for parents, guardians and school staff. It does not knowingly collect information from children, and the email form is the only place any personal information is entered.

Your requests

To see, correct or delete anything stored about an email address, use the contact address in the footer from that address.

Changes

If what is stored changes, this page changes with it and the date at the top is updated.