Privacy Policy
Last updated: 20 March 2026
Who we are
HangryMatch is a free restaurant-matching app. The data controller is the HangryMatch team, contactable at privacy@hangrymatch.com.
What data we collect and why
| Data | Why | How long |
|---|---|---|
| Your location | To search for restaurants near you | Stored in your session - deleted within 24h of session expiry |
| Your name | To identify you to your group during a session | Stored in your session - deleted within 24h of session expiry |
| Your swipes | To detect a group match | Stored in your session - deleted within 24h of session expiry |
| Your IP address | Rate limiting (security) | Stored by HangryMatch for up to 1 hour, then auto-deleted. Cloudflare may also process IP addresses for its own security purposes. |
| Usage analytics | To understand how the app is used and fix bugs | Retained by PostHog per their policy (EU-hosted). Name input fields are masked in session recordings. |
No accounts. No email addresses. No payment data. No persistent user profiles.
Third-party services
- Supabase (EU) - database hosting. Session, participant, and swipe data is stored here.
- PostHog (EU) - analytics. We collect pageviews, JavaScript errors, and session replays to diagnose bugs and improve the product. Name input fields are masked in recordings. PostHog is hosted in the EU.
- Cloudflare - hosting and security. Cloudflare may process connection data including IP addresses for its own operational and security purposes. See Cloudflare's privacy policy(opens in new tab).
- Google Places API - restaurant search. Your location is sent to Google as a search parameter to find nearby restaurants. HangryMatch does not retain this data beyond your session. Google's processing is governed by Google's privacy policy(opens in new tab) and Google's API Terms of Service, which include data processing terms.
Legal basis (GDPR)
- Session data (location, name, swipes): legitimate interest in providing the service you requested (Article 6(1)(f))
- Analytics and rate limiting: legitimate interest in operating and improving a secure, functional service (Article 6(1)(f))
Your rights
Under GDPR you have the right to access, correct, or erase your data, and to object to processing. Since sessions auto-delete within 24 hours, most data is gone quickly. For any requests, contact privacy@hangrymatch.com.
Changes to this policy
We may update this policy from time to time. Material changes will be reflected in the "last updated" date at the top of this page.