Nomster Privacy Policy

Effective date: September 30, 2026

Nomster ("Nomster", "we", "us") is a web app for browsing dishes from around the world and keeping a personal log of the dishes you have tried. It is operated by Manuel Muñoz Sánchez. This policy explains what information we collect, how we use it, and the choices you have. Questions can be sent to info@2mst.com.

1. Information we collect

• Account information. Your email address and a password (stored only as a salted hash) if you sign up with email. If you sign in with Google, we receive your email address and basic profile information (name and profile picture) from Google. We never receive your Google password.
• Content you create. Dishes you log, plus any place name, rating, review text and visit date you add; dishes you bookmark as "want to try"; problem reports you submit; and, if you choose to create a public profile, your chosen username.
• Location. If you use "Local cuisine" or "Find this dish near me", your browser asks for your permission to share your approximate location. Your coordinates are sent to our servers and to the third-party services listed below to find your country and nearby restaurants. We do not store these coordinates in your account.
• Technical data. Standard server and hosting logs (such as IP address, browser type and pages requested) that our hosting providers keep for security and reliability.

2. Cookies

We use only essential cookies and browser storage needed to keep you signed in. We do not use advertising or cross-site tracking cookies.

3. How we use information

• To provide the service: authenticate you, save your logs and bookmarks, and show your collection.
• To show anonymous community information on dish pages, such as average ratings and recent reviews. These never include your identity or the place you ate at.
• To find nearby restaurants and determine your country when you ask us to.
• To moderate content, handle problem reports, and keep the service secure.

We do not sell your personal information and we do not use it for advertising.

4. What is public

Your collection is private by default. If you opt in to a public profile, anyone with the link can see your username and the dishes you logged, with ratings, reviews and visit dates. Places you ate at are never shown publicly. You can switch your profile back to private at any time. Ratings and review text (without your identity) may appear anonymously on dish pages even if your profile is private.

5. Service providers and third parties

We share information only with providers needed to run Nomster:

• Supabase – database and authentication (stores your account and content).
• Vercel – hosting of the application.
• Google – Google Sign-In (if you choose it) and Google Maps / Places, which receive the coordinates needed for map display and nearby restaurant search. Google's handling of data is described in the Google Privacy Policy.
• OpenStreetMap Nominatim – converts your coordinates into a country.

Nomster's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We may also disclose information if required by law.

6. Retention and deletion

We keep your account and content until you ask us to delete them. To delete your account and associated data, email info@2mst.com from your account address. You can remove individual logs and bookmarks yourself in the app at any time. Backups and provider logs may persist for a limited time afterwards.

7. Your rights

Depending on where you live (for example under the GDPR or CCPA), you may have the right to access, correct, export or delete your personal information, and to object to or restrict certain processing. Contact info@2mst.com to exercise these rights.

8. Security

Data is transmitted over HTTPS and access to it is restricted by database-level access rules. No system is perfectly secure, so we cannot guarantee absolute security.

9. Children

Nomster is not directed to children under 13 (or under 16 in the EU/UK), and we do not knowingly collect their information. If you believe a child has provided us information, contact us and we will delete it.

10. International transfers

Our providers may process data in countries other than your own, including the United States.

11. Changes

We may update this policy. The effective date above shows the latest version; material changes will be noted in the app or by email.

12. Contact

Manuel Muñoz Sánchez – info@2mst.com