Privacy Policy

Burger Bros is a burger-rating club. Reviews, grades and inspector names are public — that's the point of the site. Your email address is not: we use it to log you in and to contact you about the club, and we don't sell it or hand it to anyone.

• Account details — your email address, your chosen inspector name, your badge number, your date of birth (asked once at signup, only to confirm you are 13 or older, and never shown to anyone), and a securely hashed PIN (we can't read your actual PIN).
• What you post — burger ratings, written reviews, photos you upload, and spots you add to the map.
• How you weigh in — your helpful / not-helpful votes on other inspectors' reports, your known-associate requests and acceptances, and your vote in the monthly Burger Meet Up poll.
• Invitation records — who invited you, and who joined on your code.
• Activity basics — when your account was last active (a last-seen timestamp, updated while you have the site open, which powers the "on duty" dot other inspectors see), and failed login attempts (so accounts can't be broken into by guessing).
• Reports and blocks — reports you file about another inspector's post (the reason and any note, seen only by the Commissioner), and the inspectors you choose to block. Nobody is told who reported or blocked them.
• Your terms agreement — when you agreed to the Terms of Service, and which version, so we can show you the changes when they change.

Public: your reviews, scores, photos and badge number, plus the grades they add up to — readable by anyone and indexable by search engines. To the logged-out public your reports are signed with your badge number only, as “Agent 0001”.

The helpful / not-helpful tallies on a report are public; who cast which vote is not shown to anyone.

Inspectors only: your inspector name, rank and recruiting tally, the Task Force roster and personnel files, your known associates, your Meet Up vote, and whether you're currently on duty. Signing in is required to see who is behind a badge number.

Private: your email address and PIN. Your email is visible only to the site's administrator and is never shown on any public page.

• Logging you in.
• Club business — things like changes to how the site works, or news about the Bureau. If we ever send anything beyond that, every message will include a way to opt out.

Bureau email is two things and nothing else: a notice about the monthly Burger Meet Up, and a PIN reset link when you ask for one. You choose at signup whether to get the Meet Up notices and can switch them off any time in Settings; a reset link you request is always sent.

We do not sell, rent or share your email address with anyone.

Off unless you turn them on in Settings, per device. When you do, your phone or browser gives us a delivery address for that device, which we store against your badge and use for two things only: a new notice on the Bureau Bulletin (specials, Meet Up news) and a warning that a PIN reset was requested for your badge. Turn them off in Settings or in your phone's notification settings and the address is deleted or stops working.

One cookie: it keeps you signed in. No advertising or tracking cookies. If the site adds advertising in the future, this policy will be updated first and a consent banner will appear before any ad cookie is set.

• Vercel hosts the site and stores uploaded photos. Neon stores the database. Both process data on our behalf and see standard server logs (like IP addresses).
• Resend sends the Bureau's email: PIN reset links, Meet Up notices and report receipts. It sees the address it is sending to and the message.
• Cloudflare runs the domain's DNS and routes mail sent to info@burgerbros.us to the Commissioner's inbox.
• Google Places supplies restaurant details when someone adds a spot. Your search text for the spot goes to Google; nothing about your account does.
• Map tiles come from CARTO/OpenStreetMap — loading the map sends your IP address to the tile server, as with any image on the internet.

One optional feature uses your device location, and only after your browser or your phone asks and you allow it: the map's "Near me" button, which sorts spots by distance from you. On the website the position is used for that request only, turned into distances to spots on file, and never saved to our database. In the iPhone app the sorting happens on the phone itself and your position never leaves it. Your browser may remember that you allowed it (on the device, not on our servers) so you aren't asked every visit. Decline the permission and everything else works normally.

The app is the same club with the same records, so everything above applies. A few things are specific to the phone:

• Location is used only for the map's "Near me" button, and only after iOS asks and you allow it. The sorting happens on the phone; your position is never sent to us or stored anywhere.
• Camera and photo library are used only when you attach a photo to an inspection, and only after iOS asks. The photo is shrunk and re-encoded on the phone before upload, which drops the camera's location and device data.
• Your sign-in is kept in the iPhone Keychain and sent with each request, the way the website's cookie is. Signing out or deleting your badge removes it.
• The map is Apple Maps, so Apple receives the map requests, as with any app that shows an Apple map. Apple's privacy policy covers that.
• No push notifications in the app yet. If they arrive, they will be off until you turn them on, like the website's.

The site is kept family-friendly and membership is by invitation only. Signup asks for a date of birth; anyone under 13 is turned away before an account exists, and nothing from that attempt is kept. We don't knowingly collect personal information from children under 13. If you believe a child under 13 has an account, contact us and it will be removed.

• You can change your inspector name, email and PIN on your own file.
• You can edit your own reviews at any time.
• You can report any inspection to the Commissioner, and block any inspector so their reports stop showing for you. Both are on every inspection, on the website and in the app; blocks can be undone in Settings.
• You can delete your badge yourself, any time: Settings → Delete my badge, on the website or in the iPhone app. Your account, your email address and every inspection you filed (photos, notes and votes) come down right away.
• Want only some of your content deleted, or would rather we did it? Email us and it will be done — including your email address.

Questions, corrections, deletion requests: info@burgerbros.us.

If this policy changes, the date at the top changes with it. Meaningful changes get called out to members directly.