dishvote.
Sign in

Privacy Notice

Last updated: April 19, 2026

1. Who we are

DishVote is operated by Groupe Coda, the legal entity behind the service. Groupe Coda is the data controller for the personal data we process about you in connection with DishVote. You can reach us at info.dishvote@gmail.com.

2. What data we collect

  • Account data — email address, username, avatar, password (hashed), and authentication identifiers when you sign in via Google.
  • Profile and content — votes, comments, lists, dishes and restaurants you submit.
  • Usage and device data — IP address, browser, device identifiers, pages viewed, referrers and rough geolocation derived from IP.
  • Guest vote fingerprint — a hashed browser fingerprint used to prevent duplicate votes from non-logged-in users.
  • Support communications — messages you send us.
  • Cookies and similar technologies — see “Cookies” below.

Payment data (card numbers, billing address) is collected and processed directly by our Merchant of Record, Paddle. DishVote never sees or stores your full card details.

3. Why we use your data

  • To create and maintain your account and provide the Service (contract performance).
  • To rank and display dishes, comments and lists you contribute (contract performance).
  • To prevent fraud, abuse and duplicate voting (legitimate interests, legal obligation).
  • To provide customer support and respond to your requests (contract / legitimate interests).
  • To send service updates and, with your consent, occasional product news.
  • To improve the Service through aggregated analytics (legitimate interests).
  • To comply with legal obligations (e.g. tax, accounting, lawful requests).

4. Who we share data with

We share personal data only with:

  • Service providers (subprocessors) — hosting, database, authentication, email delivery, analytics and customer support tooling, acting on our behalf and bound by confidentiality.
  • Paddle.com — our Merchant of Record for the sale of Premium subscriptions, payments, subscription management, tax compliance and invoicing. See Paddle’s Privacy Notice.
  • Professional advisers — lawyers, accountants and auditors, where necessary.
  • Authorities — where we are legally required to disclose.
  • Acquirers — in the context of a merger, acquisition or sale of assets, under appropriate confidentiality.

We do not sell your personal data.

5. International transfers

Some of our service providers may be located outside your country of residence, including in the United States. Where personal data is transferred internationally, we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions, where required by law.

6. How long we keep data

We keep account data while your account is active and for a reasonable period afterwards to comply with our legal obligations and resolve disputes. Public contributions (votes, comments, lists) may remain visible after account deletion in anonymised or aggregated form. Payment records are retained by Paddle in line with their own retention rules and applicable tax law.

7. Your rights

Depending on where you live, you may have the right to access, rectify, erase, restrict or port your personal data, to object to certain processing and to withdraw consent at any time. You can also lodge a complaint with your local data protection authority.

To exercise your rights, contact us at info.dishvote@gmail.com. We will respond within the time required by law (typically one month under GDPR).

8. Security

We use appropriate technical and organisational measures (encryption in transit, access controls, row-level security on our database, monitoring) to protect your personal data. No system is 100% secure, and you also play a role by keeping your credentials safe.

9. Cookies

We use a small number of cookies and similar technologies:

  • Essential — required to sign in and operate the Service.
  • Analytics — to understand how the Service is used and improve it.
  • Advertising — to show relevant ads on free pages, where applicable.

You can manage your preferences at any time using the “Manage cookies” link in the footer.

10. Children

DishVote is not directed to children under 13 (or the equivalent minimum age in your country). We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will take appropriate steps.

11. Changes to this notice

We may update this Privacy Notice from time to time. The “Last updated” date at the top reflects the latest version. We will inform you of material changes through the Service.

12. Contact

DishVote (operated by Groupe Coda) — info.dishvote@gmail.com. See also our Terms of Service and Refund Policy.