Privacy notice

We collect as little as we can. No accounts, no email, no advertising, and analytics only if you allow it.

Who we are

TennerEats is run by CanMarket Limited, registered in England and Wales, company number 07212058. Registered office: 168 Old Dover Road, Canterbury, Kent, CT1 3EX. We decide how the data described here is used, so we are the data controller. Contact: [email protected].

What we collect and why

We only collect what running a crowdsourced map needs.

• Browsing. Just looking at the map sets no cookie unless you allow analytics. Your browser does remember a few choices you make here (that you have seen the welcome card, your map filters, your cookie choice); that stays on your device.
• A random id in a cookie. The first time you add a place, report a price, vote, flag or choose a display name, we give your browser a random id so we know it is the same browser next time. There is no account behind it.
• Display name. Optional, and chosen by you. It is shown publicly on the leaderboard. If you do not pick one you appear as “Anonymous”.
• Your contributions. Places, prices, meals, notes, votes and flags, with the time you made them, are stored against your cookie id. They are published as part of the map. The id itself is never published.
• Your IP address, for rate limiting only. To stop abuse we count requests per hour. We store a SHA-256 hash of your address, not the address, and the counts are deleted once they are a couple of hours old. The address itself is never written to our database.
• Analytics, only if you allow it. If you accept analytics in the cookie banner, Google Analytics (loaded through Google Tag Manager) records the pages you view, how you arrived, your device and browser type, and your approximate area (town or city level, worked out from your IP address, which Google Analytics does not store). We use it to see what people use and to improve the site. If you reject it, or never choose, no analytics cookies are set and nothing identifying is sent. Change your mind at any time with Cookie settings, which is also in the footer of every page.
• Postcodes. When you add a place, our server sends the postcode you typed to postcodes.io to find its coordinates. Nothing else goes with it.
• Your location. The “find my location” button on the map asks your browser. Your position is used on your device to move the map and is never sent to us.

Our lawful basis for running the map is legitimate interests: a crowdsourced public map of cheap meals. For analytics it is your consent. We do not sell data and we do not use advertising networks.

Cookies

The cookie banner asks before anything optional is set. The full list is also under Cookie settings.

• te_id (strictly necessary). A random id, signed so it cannot be forged. It is HttpOnly (scripts on the page cannot read it), SameSite=Lax, and lasts one year. It is set only when you first contribute, never just for browsing. You can delete it in your browser at any time; you will then appear as a new contributor.
• cc_tennereats (strictly necessary). Remembers your cookie choices, for six months.
• _ga and _ga_X8XEHFV7F2 (analytics, only with your consent). Set by Google Analytics to tell visits apart and keep track of a visit. They last up to two years and are deleted if you withdraw consent.
• Browser storage (strictly necessary, on your device only). tennereats.welcomed and the tennereats.home.* keys remember choices you made: that you have seen the welcome card, your map filters, list layout and near-me setting. They are never sent to us.

Who else sees data

• Cloudflare hosts the site. It sees your IP address and requests in its own logs, under its own policy.
• OpenFreeMap (tiles.openfreemap.org) supplies the map tiles. Your browser contacts it directly, so it sees your IP address and which part of the map you load.
• postcodes.io receives the postcode you type when adding a place, sent from our server.
• Google, only if you allow analytics, receives the analytics data described above as our processor, under its privacy policy. Google may process it in the United States, covered by the UK-US data bridge. Google Signals and advertising features are switched off.

How long we keep it

Contributions are kept as part of the dataset. The only link back to you is your cookie id, so if you delete the cookie we can no longer tell which contributions were yours. Hashed IP counts are pruned within a couple of hours. Google Analytics data is kept for 14 months, then deleted.

Your rights

Under UK GDPR you can ask to see the data we hold about you, to have it corrected or erased, and to object to how we use it. Because we only know you by a cookie, we may ask you to tell us your display name and roughly when you contributed. If you are unhappy with how we handle things, you can complain to the Information Commissioner’s Office at ico.org.uk.

Children

TennerEats is not aimed at anyone under 13.

Changes

If we change this notice we will update the date below.

Contact

Questions or requests: [email protected]. See also our terms of use.

Last updated: 15 October 2026