What we collect
We collect the smallest possible set of data to run the guide.
| Data | Purpose | Legal basis |
|---|---|---|
| Search queries | Generate and cache city guides; understand which destinations to prioritise | Legitimate interest |
| Page views & referrers | Aggregate, anonymised analytics — counts only, no individual profiles | Legitimate interest |
| IP address | Rate-limiting and abuse prevention; not stored beyond the request | Legitimate interest |
| Country / language preference | Route to correct regional guide | Legitimate interest |
We do not collect names, email addresses, or any account information unless you write to us directly. We do not build profiles. We do not sell data.
Cookies
We use a small number of cookies, all strictly functional or anonymous-analytics in scope.
Preserves your light/dark reading-mode preference and recent search context for the duration of the browser session. Expires on close.
Anonymous page-count analytics. No cross-site tracking. No fingerprinting. Expires after 30 days.
Browser-local caching of map tiles served via Mapbox/MapLibre. Reduces repeat data transfer. No personal data.
No advertising cookies. No cross-domain tracking pixels. You can clear cookies at any time in your browser settings without affecting the guide content.
Third-party services
Several services process data on our behalf to deliver the guide. Each is bound by its own privacy policy and by data processing agreements where required under GDPR.
- Google Places API — used to resolve venue coordinates, opening hours, and map links. Queries contain only venue name and city; no user identifier is transmitted. Google's privacy policy applies: policies.google.com/privacy.
- Mapbox / MapLibre GL — serves the interactive city map. Tile requests include a hashed, non-attributable session token. Mapbox's privacy policy: mapbox.com/legal/privacy.
- Vercel (hosting) — serves this site from edge nodes globally. Vercel logs standard server access records for up to 30 days. Vercel's privacy policy: vercel.com/legal/privacy-policy.
- OpenAI / Perplexity — used to research and structure city guides. Queries contain only city names and publicly available editorial context; no personal data is passed to these models. Outputs are cached in our database and not re-processed per visitor.
We do not use social login buttons, embedded social widgets, or advertising networks. None of these services receive your identity.
Data retention
Search queries are stored for up to 90 days to inform guide coverage priorities, then deleted. Anonymised aggregate analytics (total page views per route, no individual rows) are retained indefinitely as operational metrics. Server access logs are deleted after 30 days.
Cached city guides (venue data, scores, article text) are stored indefinitely in PostgreSQL as the core product asset. This data is sourced from public expert reviews and contains no personal information.
Your rights (GDPR)
If you are located in the European Economic Area or the United Kingdom, you have the following rights under GDPR / UK GDPR:
- Access — Request a copy of personal data we hold about you.
- Rectification — Ask us to correct inaccurate data.
- Erasure — Request deletion of personal data ("right to be forgotten").
- Restriction — Ask us to restrict processing while a dispute is resolved.
- Portability — Receive your data in a structured, machine-readable format.
- Objection — Object to processing based on legitimate interests.
Given the minimal nature of data we hold, most requests will be straightforward to fulfill. Contact us at hello@the3.food and we will respond within 30 days. You also have the right to lodge a complaint with your national supervisory authority.
Contact
Privacy questions, data requests, or anything else — write to us:
the3.food
hello@the3.foodThis policy may be updated when the service changes materially. The "Last updated" date at the top of this page will always reflect the most recent revision. We will not retroactively expand data uses without notice.
No ads. No paid placements. No data sales. Ever.