Privacy
Effective / last updated: October 25, 2026
Armenian Food HubOperated by Rafael Nikogosian d/b/a WRONCE
California, United States
Privacy contact: [email protected]
Business contact: [email protected]
Information we process
Account details, password hashes, business listings and uploads, favorites, submitted messages, support conversations, membership and transaction references, aggregate listing activity, and technical request data such as IP addresses and browser information for operation and abuse prevention. Stripe processes payment-card details; do not send card numbers in messages.
Why and who receives it
We use information to operate accounts, publish listings, handle inquiries, provide support and prevent abuse. A catering inquiry is shared with the platform and the approved owner of the selected business. Hosting, storage, payment and push-delivery providers process data to supply these services. Public listings and published content are visible to everyone.
Cookies, location and notifications
We use session cookies for sign-in and browser storage for preferences, install prompts and game progress. Nearby search uses location only after browser permission. Maps may contact a third-party map provider. Push requires a separate opt-in; installation is not consent. Turn off notifications on the Notifications page or in device settings. Private account pages are not available offline.
Retention and your choices
Account data is kept while needed to operate the service. Payment, fraud-prevention, dispute and legal records may need longer retention; backups may persist through their normal rotation. You may request access, correction or deletion through Account & privacy or Contact. Identity verification may be needed. Rights depend on your jurisdiction; we do not claim every privacy statute applies to this business.
Tracking and policy changes
The app does not currently use advertising pixels or sell contact lists as a product feature. A global opt-out / Do Not Track signal does not change necessary session operations. External sites have their own policies. Material policy changes will be published here with an updated date. Notify us before adding new analytics, advertising or data recipients so these disclosures can be updated.
Children and contact
The service is not designed for children under 13. Do not create an account or submit a child's personal information. Contact the published operator or use Contact for privacy concerns, including information submitted without an account.
External accessibility service
AccessibleWeb Widget is loaded from jsDelivr. Loading third-party scripts and fonts sends technical request information, including your IP address and browser information, to the delivery providers. Display preferences are stored in this browser. Optional speech features depend on your browser and operating system and may use their speech services; avoid using them with sensitive text. These tools do not certify legal compliance. Contact us using the published privacy contact about data processing.
Google sign-in
If you choose Google sign-in, Google shares your account identifier, verified email address and available profile names with us to authenticate you. We request no access to Gmail or Drive. We retain the Google identifier linked to your platform account; Google tokens are not retained after processing sign-in. Pending registration details expire after 10 minutes. Matching email addresses do not automatically merge accounts: an existing account password is required. You may use Google authentication for account-security actions for 5 minutes after verification. Account deletion processing includes linked login identifiers.
Password recovery emails
At your request, Resend processes the destination email address and reset-message contents to send account recovery mail. Recovery links expire after 30 minutes and can be used once. Verification stores a token hash; unsent queue tokens are encrypted and removed after sending, failure or expiry. Temporary reset metadata is retained for up to seven days by the configured cleanup worker. Mail acceptance does not guarantee inbox delivery. Never share a recovery link.
Account and business notifications
Resend sends service emails about account creation, email confirmation, verified payments and restaurant-card publication. These are transactional messages, not marketing consent. You can choose their language in account settings. Pending message content is encrypted and cleared after API acceptance, final failure or seven days. API acceptance does not guarantee inbox delivery. Minimal event references and delivery-attempt statuses remain until account deletion to avoid duplicate notifications. Confirmation links expire after 24 hours; temporary confirmation records are removed after expiry plus seven days. Replies to these emails go to our public info address.
Optional usage and subscription analytics
On armenianfoodhub.com, Google Analytics 4, Google Tag Manager and Microsoft Clarity load only after you allow analytics. Coverage includes public pages, owner accounts and subscription checkout/confirmation. We measure subscription selections, checkout starts and server-confirmed initial purchases, including the subscription product, amount, USD currency and Stripe invoice ID as transaction_id. Clarity masks page text and sensitive account/payment blocks. Authentication, recovery, administration and private messaging pages remain excluded, as do URLs containing tokens or free-form query parameters. A Checkout return reference is removed before trackers start. We do not send names, emails, contact details, messages, card numbers or authentication tokens in our custom events. Development previews are excluded. We honor Global Privacy Control and Do Not Track; advertising storage and personalization remain denied. Your analytics choice is stored in this browser for up to 180 days. After consent, purchase deduplication stores only one-way invoice-ID hashes, not invoice details or amounts. Privacy choices in the footer lets you change or withdraw consent. Withdrawal clears accessible analytics cookies and purchase hashes and reloads the page to stop active scripts. Opening Checkout does not confirm payment. Providers have their own privacy policies; additional GTM tags require separate privacy review. Replit/Umami, if separately supplied by the host, is distinct. These controls do not certify legal compliance.
Operational error monitoring
We use Sentry to diagnose application failures, separately from optional usage analytics. Reports are restricted to error type, source file/line, application release, environment, and static server route/status where available. We remove free-text error messages, request URLs, headers, bodies, cookies, user details, breadcrumbs, and local variables before sending. Session replay, interaction recording, performance tracing, logs, and AI conversation recording are not enabled. Sentry receives network connection metadata when reports are delivered and applies its own processing and retention policies. This configuration is not a certification of legal compliance.
Google Maps business reference
When you request a business search or reference, your query or place ID and selected language are sent to Google through our server. Google results are shown as a temporary reference, not imported into your listing. Submit your own business details, photographs and menu. Use of this feature is subject to Google's terms and privacy policy.