menuseum
Start free
QR code menuOrder & pay at the tableTV menu boardsOnline orderingTable bookingsKitchen & waiter screensMenu makerSelf-order kioskWaiter appPager alternativeAll features →
PricingSign in
en
EnglishDeutschFrançaisItalianoEspañolPortuguêsNederlandsPolskiTürkçeΕλληνικάHrvatskiČeštinaSlovenčinaSlovenščinaMagyarRomânăБългарскиSvenskaDanskNorskSuomiУкраїнськаРусскийالعربية日本語한국어中文ไทยTiếng ViệtBahasa Indonesia

Privacy policy

Last updated: 2 November 2026

Who we are

Menuseum ("we") runs menuseum.com and the Menuseum service for restaurants, cafés and bars. Contact for privacy questions: [email protected]

We have two roles. For visitors of menuseum.com and for venues with an account we decide how data is used: we are the controller. For the guests of a venue, who order, pay, book or buy a voucher on the venue's website or QR menu, the venue is the controller and we process their data only on the venue's instructions: we are the processor (see our data processing agreement).

Visitors of menuseum.com

  • We count page views per day and language without cookies and without storing IP addresses.
  • The contact form sends us your name, e-mail address and message; we use them only to answer you.
  • The restaurant name generator checks domain names with the public domain registries (RDAP). Only the domain names are sent.
  • Our servers keep technical logs (IP address, browser, pages requested) for up to 14 days for security and to fix errors.

Venues with an account and their teams

  • Account: e-mail address, name, language, password (stored only as a secure hash) and sign-in codes; sign-ins and sessions to protect your account.
  • Venue data: name, address, opening hours, menus, photos, tables, printers, screens, staff names and PINs (PINs only as hashes), business details for the legal notice.
  • Billing: plan, invoices and payment status. Card details are handled by Stripe, never by us.
  • Support: when you ask for help, our team may open your dashboard; every such access is recorded.

Legal basis: our contract with you (Art. 6(1)(b) GDPR), legal duties such as keeping invoices (Art. 6(1)(c)) and our legitimate interest in a secure service (Art. 6(1)(f)).

Guests of venues (on the venue's behalf)

  • Orders: dishes, table, notes, order number; for pickup and delivery the name, phone number, e-mail address if given, and the delivery address.
  • Payments: processed by Stripe on the venue's own Stripe account. We receive the status and the amount, never the card number.
  • Card guarantees for bookings: Stripe saves the card on the venue's account; we keep only a reference, the card brand and the last 4 digits. The venue can charge the agreed no-show fee only by pressing a button.
  • Bookings and the waitlist: name, e-mail address, phone number, party size, time and the notes the guest gives (for example allergies). Booking notes are deleted 30 days after the visit.
  • Event and group requests: contact details, date, number of guests, wishes, the offer and the deposit.
  • Gift vouchers: names and e-mail addresses of the buyer and the recipient, the message and the value. The voucher code is stored only as a hash.
  • Stamp cards: name, e-mail address, the card code, the number of stamps and rewards, and when each stamp was given (by the team, or by a completed online order). The card's link is in the guest's e-mails; a card is deleted with the guest's data or by the venue.
  • Guest list: per venue, one record per guest with contact details, number of visits, orders and no-shows, notes of the venue's team, and the date the guest agreed to receive news (only if they ticked the box). Every news e-mail has an unsubscribe link.
  • Thank-you e-mails: if the venue switches them on, one e-mail after the visit with a link to the venue's Google reviews. To send at most one every 60 days we keep only a hash of the e-mail address.
  • Kitchen tickets: orders are printed on the venue's printers with the order number, dishes, notes and, for delivery, the name and address. Print jobs are deleted after 14 days.
  • Delivery addresses are checked with OpenStreetMap (Nominatim) to find the delivery zone: only the address is sent, never a name. Street and house number are removed from delivery orders after 90 days.

Guests should read the venue's own privacy notice (linked at the bottom of every venue website) and contact the venue about their data. If guests write to us, we pass the request on and help the venue answer it.

Own domains and e-mail forwarding

When a venue takes its free domain, we register it in the venue's name with our registrar (Openprovider): the venue's name, business name, address, e-mail address and phone number go to the registrar and to the registry of that domain, as their rules require. We run the domain's DNS at Cloudflare; e-mails to hello@ and bookings@ that domain pass through Cloudflare to the venue's inbox.

Cookies

We use only cookies that are needed for the service: signing in, the language you chose, the shopping basket, the table you scanned, your own order's status page, and the pairing of staff tablets, TVs and print stations. We use no advertising or tracking cookies, so there is no cookie banner.

Service providers

  • Hetzner Online (Germany): servers and databases in the EU.
  • Cloudflare: content delivery, protection against attacks, DNS of venue domains, e-mail forwarding.
  • Resend (EU region): sending e-mails.
  • Stripe: payments of guests on the venues' own accounts, card guarantees, and our own billing.
  • Openprovider and the domain registries: registration of venue domains.
  • OpenStreetMap Foundation (Nominatim): finding delivery addresses on the map; only the address is sent.
  • DeepSeek: machine translation of menus and texts. Only menu and interface texts are sent, never personal data.

Some of these providers are based outside the EU (for example in the USA). Transfers are protected by the EU standard contractual clauses or the EU-US Data Privacy Framework.

How long we keep data

  • Account and venue data: while the account exists. When a venue is deleted, its menus, orders, bookings, vouchers and guest list are deleted with it.
  • Orders and bookings: as long as the venue's account exists, so the venue can see its history and export it. Booking notes: 30 days after the visit. Delivery street and house number: 90 days.
  • Copies of e-mails we sent: 30 days. Print jobs: 14 days. Server logs: 14 days. Address look-ups for delivery (without names): up to 180 days.
  • Invoices for our plan: as long as tax law requires (up to 10 years).

Security

All connections are encrypted (HTTPS). Passwords, staff PINs, sign-in codes and voucher codes are stored only as hashes. Only the members of a venue's team can see its guests.

Your rights

You can ask for access, correction, deletion, restriction or a copy of your data, object to processing and withdraw consent at any time. Venues can delete a guest's data in the guest list with one click. You can also complain to a data protection authority.

Write to [email protected]