Privacy Policy
Last updated July 2, 2026
This policy explains what FestBites collects, why, who we share it with, and the choices you have. We keep it plain: we run a small app for rating festival food, and we try to collect only what we need. By using FestBites you also agree to our Terms of Service.
Information we collect
We collect the following:
- Account information you give us: your email address, password (stored hashed by our auth provider, never in plain text), and any name, username, or avatar you add.
- Content you create: reviews, star ratings, message-board posts, reactions, mentions, photos you upload, and feedback you send us (including the contact email attached to that feedback).
- Payment information when you tip a vendor or the app: payments are processed by Stripe. We do not store your card number; we keep a Stripe customer reference and the status of any transaction.
- Usage and device data collected automatically: your IP address, browser and device type (user-agent), pages viewed, and actions taken. We use this to keep the app running, prevent abuse, and understand what is useful.
Analytics and cookies
We use analytics tools to understand how the app is used so we can improve it. These run through Google Tag Manager and Google Analytics, and we also use a product-analytics tool (PostHog). They set cookies or similar identifiers and collect usage and device data such as pages viewed, actions taken, approximate location (from your IP address), and browser type. We use this only in aggregate to measure and improve the app, never to sell your personal information. You can limit this with your browser settings or a tracking-blocker; the app still works.
Photos and public content
Reviews, ratings, message-board posts, and vendor photos you submit are public inside the app: other users can see them, and photo links are publicly accessible. Do not upload anything you would not want others to see. If a photo shows other identifiable people, only upload it if you have their permission. The license you grant us over content you upload is described in the Terms of Service.
Selling data: anonymized only
We want to be direct about this. We may share or sell anonymized, aggregated data - for example, statistics about which food vendors or dishes are most highly rated at a festival. This data is stripped of anything that identifies you and cannot reasonably be traced back to you, and we do not attempt to re-identify it.
We do not sell your personal information. We do not sell or rent your email address, name, or account, and we do not share your email with third parties for their own marketing.
Email and notifications
We will never spam you. We send transactional emails only - for example, when an admin replies to feedback you submitted. Every email we send includes a one-click unsubscribe link that turns those emails off immediately, no login required. You can also manage email notifications any time in your account settings. We do not share your email with third parties for their marketing.
Your choices and rights
You can view and update your profile, change your email or password, and manage notification settings from your account. You can ask us to access, correct, or delete your personal information by emailing phozee@gmail.com.
If you are a California resident, the CCPA/CPRA gives you the right to know what personal information we collect, to request access to or deletion of it, to correct it, and to opt out of the sale of personal information. Because we do not sell personal information (only anonymized, aggregated data), there is nothing to opt out of - but you can still exercise your other rights by contacting us at the email above. We will not discriminate against you for exercising any of these rights.
Data retention
We keep your information for as long as your account is active or as needed to provide the app. When you delete your account, we delete or anonymize your personal information, except where we need to keep some of it to meet legal, security, or fraud-prevention obligations.
Security
We use industry-standard measures to protect your information, including encryption in transit and access controls. No method of storage or transmission is perfectly secure, so we cannot guarantee absolute security.
Children
FestBites is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has given us personal information, contact us and we will delete it.
Changes to this policy
We may update this policy from time to time. When we make material changes, we will update the date at the top of this page. Continued use of the app after a change means you accept the updated policy.
Contact us
Questions or requests about your privacy? Email phozee@gmail.com.