Privacy Policy

Account Information

When you create an account, we collect your email address, display name, and profile photo through our third-party authentication provider. Passwords are managed entirely by the authentication provider and are never stored or accessible to us in plain text.

Usage Data

We collect data about how you interact with Crispy, including pages visited, restaurants viewed, map interactions, search queries, bookmarks saved, reviews submitted, and votes cast. This data helps us improve the platform and personalize your experience.

Device & Browser Information

We may collect technical information such as your IP address, browser type, operating system, and device identifiers for analytics and security purposes.

Public Creator Content

Crispy displays publicly available information about food creators from Instagram, YouTube, TikTok, and similar platforms. Specifically, we collect and display:

• •Public profile information (username, display name, profile picture, follower count).
• •Publicly available media (photos and videos) and their captions or descriptions.
• •Post engagement metrics (views, likes, comments) where publicly accessible.

This data is accessed through official platform APIs (including Meta's Instagram Graph API and Google's YouTube Data API) and public endpoints. It is used solely to curate restaurant recommendations and attribute creator reviews. We do not access private messages, private posts, or any non-public information. Creators featured on Crispy have not provided this information to us directly and are not Crispy users or partners unless they have separately claimed their profile. Creators may request removal at support@crispylist.com. Platform data remains governed by the privacy policies of the originating platform (Meta, Google/YouTube, TikTok).

• •To provide, operate, and maintain the Service.
• •To personalize your experience (bookmarks, followed creators, preferences).
• •To process your reviews, votes, and hidden gem submissions.
• •To curate restaurant recommendations using public creator content from Instagram and other platforms.
• •To send service-related communications (account verification, security alerts).
• •To detect and prevent fraud, abuse, or security incidents.
• •To provide aggregate, anonymized analytics to claimed restaurant owners.
• •To analyze platform usage through third-party analytics providers and improve product features.

We rely on third-party service providers to operate the Service. These providers may receive your data only as necessary to perform their function. Categories of providers include:

• •Authentication provider — manages sign-in, session tokens, and user account records.
• •Hosting and infrastructure providers — host the website and store application data.
• •Analytics providers — measure product usage to help us improve features.
• •Transactional email providers — deliver account and service-related email.
• •Meta (Instagram) — we access public creator content through Meta's Instagram APIs. Data handled by Meta is governed by Meta's Privacy Policy.
• •Google — we use Google Places API for restaurant data enrichment, Google Maps for maps, and YouTube Data API for public video content. Data handled by Google is governed by Google's Privacy Policy.

Crispy embeds content from Instagram, YouTube, and TikTok. When you view embedded content, those platforms may collect data according to their own privacy policies. A current list of specific vendors is available on request at support@crispylist.com.

We do not sell your personal information. We may share data only in the following cases:

• •Service providers: As described in Section 3, only as necessary to operate the Service.
• •Restaurant owners: Aggregate, anonymized analytics only (e.g., total profile views). No personal user data is shared.
• •Legal requirements: If required by law, court order, or to protect our legal rights.
• •Business transfers: In connection with a merger, acquisition, or sale of assets, your data may be transferred. We will notify you before such a transfer.

We use cookies and local storage for the following purposes:

• •Authentication: Session tokens managed by our authentication provider to keep you logged in.
• •Preferences: User settings such as hidden creators, saved filters, and display preferences.
• •Analytics: Our analytics providers use cookies to track usage patterns and help us improve the Service.

We do not use third-party advertising cookies. You can control cookie behavior through your browser settings, though disabling cookies may affect Service functionality.

We retain your account data for as long as your account is active. If you delete your account, we will remove your personal data within 30 days. Anonymized usage analytics may be retained indefinitely. Instagram API data (creator posts and captions) is refreshed periodically and only retained as needed to display current recommendations.

To request deletion of your data, email us at support@crispylist.com.

Crispy is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected data from a child, please contact us immediately at support@crispylist.com and we will promptly delete that information.

You have the right to:

• •Access and review your personal data.
• •Correct inaccurate or incomplete information.
• •Delete your account and associated personal data.
• •Export your data (bookmarks, reviews, account info).
• •Opt out of non-essential email communications at any time.

To exercise any of these rights, contact us at support@crispylist.com.

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• •Right to Know: You may request disclosure of the categories and specific pieces of personal information we have collected about you, the sources of that information, our purposes for collecting it, and the categories of third parties with whom we share it.
• •Right to Delete: You may request that we delete personal information we have collected from you, subject to certain exceptions.
• •Right to Opt Out: We do not sell personal information. If this changes, we will provide a “Do Not Sell My Personal Information” link.
• •Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights.

To submit a CCPA request, email support@crispylist.com with the subject line “CCPA Request.”

We implement industry-standard security measures including encrypted connections (HTTPS), secure token-based authentication, and access controls on our database. However, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security of your data.

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated “Last updated” date. We encourage you to review this page periodically. Your continued use of the Service after any changes constitutes acceptance of the updated policy.

For questions, contact us at support@crispylist.com.