Privacy notice for guests
For everyone who opens a menu provided by Simpli, for example after scanning a QR code in a restaurant.
Last updated: October 2026
In short
The menu pages have no tracking, no advertising or analytics cookies, and therefore no cookie banner. We only process what is technically needed to show the menu, and we count scans anonymously for the restaurant.
1. Controller
The menu pages are operated by:
Jannik Thieme (Simpli)
c/o IP-Management #11157
Ludwig-Erhard-Straße 18
20459 Hamburg, Germany
Email: info@simpli.menu
The restaurant is responsible for the content of its menu (dishes, prices, images, legal notice). You can find its details under "Imprint" at the bottom of the menu.
2. What data we process
– Loading the page (hosting): When you open the menu, our hosting provider Vercel Inc. technically processes your IP address, date and time, the requested address and browser and device information in order to deliver the page and protect it against attacks. These server logs are deleted after 30 days at the latest.
– Dish photos: Photos are delivered via Firebase Storage operated by Google Ireland Limited; your IP address is technically transmitted to Google in the process.
– Page speed: With Vercel Speed Insights we measure how fast the page loads (load times, page visited, device type, browser, operating system). No cookies are set and no user profiles are created.
– Language setting: The selected language is part of the page address and is also stored in a cookie (NEXT_LOCALE) so the menu opens in the same language next time.
– Anonymous scan statistics: When you scan a QR code, we count the visit so the restaurant can see how often its menu is opened. We only store aggregated counters per QR code and day: the number of scans, the time (full hour) and the language set in your browser (e.g. "de" or "en"). Your IP address, device identifiers or any other information that could identify you are not stored for this.
3. Legal basis
Hosting, image delivery, page-speed measurement and the anonymous scan statistics are based on Art. 6(1)(f) GDPR. Our legitimate interest is a secure, fast and functional menu and providing restaurants with anonymous usage figures for their QR codes. Storing the language setting is strictly necessary for the service you requested (Section 25(2) no. 2 TDDDG); no consent is required for it.
4. Retention
Server logs: 30 days at most. Daily scan counters: 13 months; after that only the total number of scans per QR code is kept. Language cookie: until you delete it in your browser.
5. Recipients and transfers to third countries
We use Vercel Inc. (USA) as our hosting provider and Google Ireland Limited (Firebase) for the database and images; the Firebase servers are located in the EU. Vercel is certified under the EU-US Data Privacy Framework.
6. Your rights
You have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and to object (Art. 21 GDPR). As we store no information for the scan statistics that can be linked to you, we generally cannot provide information about you in this respect. You may also lodge a complaint with a data protection authority, for example the State Commissioner for Data Protection and Freedom of Information Baden-Württemberg: https://www.baden-wuerttemberg.datenschutz.de
7. Contact
Please send questions about data protection to info@simpli.menu. Our full privacy policy for restaurants and visitors of simpli.menu is available here: