What we collect, and what we don't

We don't take payments yet, and we don't run advertising or third-party tracking. We hold an email address if you typed one in. If you save an order we also hold the name and phone number you gave for it, and a delivery address if it is a delivery. That is used for that order and not for marketing. You can have any of it deleted by asking, with one exception: the record of a restaurant's agreement with us.

Your email address, if you give it to us — joining the early-access list, showing interest in a specific restaurant, asking us to add your kitchen, or sending feedback on a combo preview. Giving it is always optional and always something you type yourself.

Your name and phone number, when you save an order. We ask for both on every order: the name is what the order is collected or delivered under, and the phone number is how we reach you about it. When ordering opens at a restaurant, it receives your order through its own ordering system, which is run by a company the restaurant has chosen. On a pickup order the restaurant gets your first name. On a delivery the restaurant makes itself, it gets your name, your delivery address, any delivery note and your phone number, so its driver can reach you. These are for that order only. The restaurant or its driver may call or text you about a delivery. The restaurant and that company handle what they receive under their own privacy policies. Today an order is only saved, and nothing is sent to anyone. We don't use your name or number for marketing, and we don't send marketing text messages.

If you tell us you want a dinner we can't sell yet, we keep that request. If you are signed in we keep it with your account, and if you give us an email address we keep that too, so we can tell you once if the dinner becomes available.

A delivery address, when you save an order for delivery. A pickup order asks for none. If you have an account, the address is kept with it so you can use it again, and you can remove it from your account.

An account, if you create one. Signing in is handled by Clerk, which holds your sign-in details; we keep a copy of the email, name and phone number on the account, with your saved addresses, orders and plans. An account is never required to order.

If you run a restaurant and accept our Restaurant Terms, we keep your name, your role, your email address and phone number, the exact text you agreed to, when you agreed, and our note of the call confirming it. We keep this for as long as the agreement lasts and for six years after, as the record of the contract.

If you reply about a page we made for your restaurant, or ask us for one, we keep what you send us: your name, role, phone number, email address and message.

Restaurants' public business details. We keep the name, address, phone number, website and published contact email of restaurants we list or may invite to sell with us, taken from their own websites and public listings. Write to us and we will remove the listing or stop contacting you. A removal covers that restaurant, not a different business that later opens at the same address. To keep a restaurant we have removed from being listed again, we keep its name, address and website on a do-not-list record.

Where you searched, when you use the Near tab. We record the approximate centre of the search (rounded to about a kilometre, a little over half a mile), the radius, and whether we had anything to show you. This is how we decide which city to open next. It is not linked to your email or to any identifier for you.

Which restaurants people want. When you tap "I'd order this" on a dinner, or "Show interest" on a restaurant, we record which restaurant and dinner it was, and your email only if you chose to add one.

Cookies and browser storage. If you sign in, Clerk sets cookies that keep you signed in. Your browser also remembers two things for you: light or dark mode, and the last ZIP or postal code you searched. Both are kept in your browser, not by us. The ZIP is used to run that search again when you come back, which reaches us the same way any search does. A street address you search, or your location, is not remembered there.

We count how the site is used: pages opened and whether their dinners came into view, searches by city, and buttons pressed. To see these as one visit we give your browser a random number, kept in a cookie for 30 days. It is not linked to your name, email, account or address, and we do not keep your IP address with it. We use no advertising or third-party tracking tools. If your browser sends a Global Privacy Control or Do Not Track signal, we count your actions without the number. We delete visit records after 30 days and keep only daily totals.

We do not collect payment details, dates of birth, dietary or health information, or contacts. Please don't put medical or allergy information in delivery notes; talk to the restaurant directly about allergies. We do not use advertising cookies, and we do not sell or share personal information with advertisers or data brokers — not as a policy position we might revisit quietly, but because nothing in the site does it.

When you search a ZIP, postal code, or address, your browser sends that text to us, and our server asks third-party geocoding services to turn it into coordinates. They receive the text and our server's IP address, not your IP address or anything else about you. A ZIP or postal code goes to zippopotam.us; a US ZIP is also checked with Nominatim / OpenStreetMap, sometimes together with the name of its city. An address goes to Nominatim. We keep the answer for a ZIP or postal code so we don't have to ask again, with nothing that says who searched it; an address you type is looked up and not kept. When you give a delivery address at checkout, its postal code (never the street) is looked up the same way, to check that delivery reaches you. If you choose "Use my location", your browser gives us coordinates directly; we use them for that search and don't store them against you.

We also query Overpass, an OpenStreetMap service, to find restaurants near a point. That request carries the area, not you.

Recipe videos are played from YouTube's privacy-enhanced player. Until you press play, only the video's preview picture is loaded; it comes from YouTube's image server, which sees your IP address as any image host does. When you press play, YouTube receives your IP address and may set its own cookies.

The site runs on Vercel, and accounts are run by Clerk. Records are stored in private Vercel Blob storage and in a Neon Postgres database, both in the United States. Vercel keeps standard server logs, which include IP addresses, for a limited period as part of operating and securing the service.

Email addresses are kept until you ask us to delete them, or until the thing you signed up for is finished and no longer relevant. The name, phone number and address on an order are kept with that order until you ask us to delete them. Search-area records carry no identity and are kept as aggregate demand data.

Email info@dalpaneer.com and ask us to show you what we hold, correct it, or delete it. The one thing we keep is the record of a restaurant's agreement with us, which we hold while it lasts and for six years after, so that either side can show what was agreed. We don't require an account to make that request, and we won't charge you or make you jump through a retention flow. Depending on where you live you may have these rights by law; we extend them to everyone regardless. We answer within 30 days.

This site isn't directed to children under 13, and we don't knowingly collect their information.

Payments are still being built. Taking payment involves genuinely new information, your card details, handled by a payment company, and this page doesn't cover it yet. We will publish an updated policy, and ask for fresh consent where consent is what's required, before that happens. We won't quietly widen this page and call it notice.

Dal Paneer is operated by Pumpr Labs LLC (operating as Dal Paneer). Questions, requests, or complaints: info@dalpaneer.com.