Privacy policy

thebitepassport is a food discovery site for travellers. You can browse every destination and dish without an account. This policy explains what the site actually stores, why, and what you can do about it.

Who operates this site

thebitepassport is an independently operated food and travel website based in Cyprus. For privacy questions or requests concerning personal data, contact us at thebitepassport@gmail.com.

Browsing without an account

If you do not sign in, your Food Passport (the dishes you mark as tried), any dietary or budget preferences you set, an in-progress Food Mission and your cookie choice are stored in your browser's local storage only. They are not sent to us and are removed if you clear your browser storage.

Accounts and authentication

Accounts are optional. You can register with an email address and password, or sign in with Google. Sign-in and account records are handled by our backend provider, Supabase, which stores your email address, authentication identifiers and sign-in timestamps. When you use Google sign-in, Google confirms your identity to us and we receive the email address associated with that Google account; Google processes that sign-in under its own privacy policy.

What we store for signed-in travellers

• Account record: your user id, email address and a basic profile row.
• Food Passport: which dishes you marked as tried, and when.
• Food Missions: saved missions with destination, trip length, diet and budget choices, selected and completed dishes, and their status (active, completed, archived).
• Traveller votes: which dishes you voted “Try this!” on. Only the total count per dish is public.
• Preferences: vegetarian, vegan, spicy and budget settings you save to your account.
• Consent records: the cookie choices you saved and the version of the notice, kept as proof of consent.

We do not ask for or store your name, photo, payment details or location. There is no public profile page and no user-published content on the site.

Images and uploaded content

Dish and destination images are editorial content uploaded by the site administrator to our backend storage. Visitors and account holders cannot upload files.

Service providers

• Lovable Cloud / Supabase — database, authentication and image storage.
• Google — Google sign-in, Google AdSense advertising and Google's consent messaging.
• Google Fonts — the site's typefaces are loaded from Google's font servers, which receive your IP address as part of that request.
• Our hosting provider — serves the site and processes technical request data such as IP address in server logs for security and delivery.

Advertising: Google AdSense

This site uses Google AdSense to show advertising. Google and its advertising partners may set or read cookies, device identifiers and similar technologies on your device to serve, measure and report on ads.

• Where you consent and it is permitted, Google may use advertising cookies and identifiers to show personalised advertising.
• Where you do not consent, ads may still be shown on a non-personalised or limited basis. Non-personalised advertising can still involve technical storage, frequency capping, fraud prevention and aggregate reporting where that is legally permitted.
• In the EEA, the UK and Switzerland, Google's consent message asks for your advertising choices and those choices control what Google's advertising technology does.

You can review Google's practices at policies.google.com/technologies/ads and change your Google ad settings at My Ad Center. We do not add any other advertising network or tracking SDK.

Analytics

No analytics or audience measurement service is currently installed on this site.

Cookies and local storage

Necessary storage keeps you signed in, protects the site and remembers your privacy choice. Your Food Passport, preferences and mission progress use browser local storage. Advertising storage is controlled by Google's consent message. Details are in the cookie policy.

Legal bases

Where EU/UK data protection law applies: contract (running your account and saving your passport, missions and votes), consent (advertising storage and any optional storage), and legitimate interests (keeping the service available and secure).

International transfers

Our providers, including Google and our backend and hosting providers, operate global infrastructure, so your data may be processed outside your country, including in the United States. Those providers rely on their own transfer safeguards, such as the EU Standard Contractual Clauses.

Security

The site is served over HTTPS. Passwords are handled and stored by our authentication provider, never by the site itself. Database access is protected by row-level security so each account can read and write only its own passport, missions, votes, preferences and consent records. Administrative functions are restricted to a separate server-side role check.

Retention

Account data — profile, Food Passport, missions, votes and preferences — is kept until you delete it or delete your account, at which point it is removed. Consent records are kept as proof of the choice you made. Browser-only data stays until you clear it. We do not currently run automatic time-based deletion of inactive accounts.

Your rights and how to use them

Depending on where you live, you may have rights to access, correct, delete, export or restrict the use of your personal data, to object to certain processing, and to withdraw consent at any time. In practice:

• Download everything we hold about you from your account page.
• Clear your Food Passport, edit preferences and archive or delete missions from within the app.
• Delete your account from the account page. This removes your passport, missions, votes, preferences, profile and login.
• Change cookie choices from the “Privacy & cookie settings” link in the footer, and advertising choices through Google's consent message.
• For anything else, email thebitepassport@gmail.com.

If you are in the EEA or the UK you may also complain to your local data protection authority.

Children

The site is not directed at children and accounts are not intended for people under 16.

Food and travel information

Dish descriptions, prices, dietary labels and tips are editorial and provided for general information only. Recipes and ingredients vary by vendor. Please use your own judgment and confirm ingredients locally if you have allergies, dietary restrictions or food-safety concerns.

Changes and contact

We update this policy when the service changes. Questions or requests: thebitepassport@gmail.com.