Privacy

Anonymous guest feedback

Guest review pages do not ask for a name, email address, room number, account, social login, precise location, or hotel Wi-Fi access.

A short-lived essential review-session cookie is used to validate the scanned QR flow, select an eligible meal service, prevent replay, and accept one submission. It expires after two hours or immediately after successful submission. Expired or revoked session records without feedback are deleted after a short safety delay.

Information retained

Dish ratings and selected reason tags are retained as hotel operational history. Optional comments are removed after 12 months while the structured rating history remains.

Guests should not include names, room numbers, or contact details in comments. Comments are visible only to specifically authorized hotel managers.

Abuse protection

The guest-review database does not persist raw IP addresses, user-agent strings, Wi-Fi details, or persistent device fingerprints. Behavioral controls may hold unusually automated submissions for authorized manager review. Negative feedback is not held merely because it is critical.

Hotel portal data

Hotel staff accounts and operational records are authenticated, role-restricted, hotel-scoped, and protected by database row-level security. Public guest routes do not provide direct access to hotel operational tables.