Privacy

What we collect

• Your email address and display name, when you create an account. If you sign in with Google we receive your email address, name and profile picture from Google — we store the first two and don't use the third.
• What you write. Reviews, the yes/no answers you give about a venue's features, venues you submit and photos you upload, each with the date you gave it.
• Reports you make about someone else's review, which moderators can see.
• Your access needs, only if you choose to tell us. You can save the features you rely on, so search can tell you how well each venue matches, and you can say which needs you were reviewing with, so readers can weigh your review. Both are optional. Your saved needs are visible only to you; the needs behind your reviews are shown on them only if you tick the box to show them.
• Tips, if you leave one. Stripe takes the payment on its own page, so your card details never reach us. Stripe tells us the amount, the date and whether it was one-off or monthly, and, if you were signed in, which account it was, so the Supporter badge can go on your reviews.

We don't ask for your address, your date of birth or your phone number.

What's public

Your display name, your reviews, your dated answers about venues, any photos you've had published, and a Supporter badge on your reviews if you tipped while signed in (you can hide it). That's the point of the site: an answer nobody can attribute is an answer nobody can weigh.

Your email address is never shown publicly. Your display name doesn't have to be your legal name, and if you'd rather review under something else, change it on your account page.

Analytics, advertising and cookies

We use Google Tag Manager to load measurement and advertising tools: Google Analytics, Google Ads and the Meta pixel (for Facebook and Instagram).

They set cookies and similar identifiers in your browser and send Google and Meta your IP address, details of your device and browser, a rough location, and the address of each page you visit. A search page's address includes the words and filters you searched with, which can include access features. Google and Meta can connect a visit to an account you have with them, and use it under their own privacy policies.

We use this to:

• see which pages get used and what brings people here;
• measure our ads and posts on Google, Facebook and Instagram;
• build audiences from people who have visited, so our ads can be shown to them again, and to people Google and Meta judge to be similar.

We don't give Google or Meta your name, your email address, your reviews or your saved access needs, and we don't sell or rent your information to anyone.

We email you about your account, the notices and reminders you can switch off on your account page, and news about the site only if you ticked the box for it.

Opting out

• Google: turn off personalised ads in My Ad Center (myadcenter.google.com), and stop Google Analytics with Google's opt-out browser add-on (tools.google.com/dlpage/gaoptout).
• Meta: change your ad preferences in Accounts Centre on Facebook or Instagram.
• Any standard content blocker stops all of these loading. Nothing on the site depends on them.

Where it's kept, and who else touches it

The database is hosted by Supabase in Sydney. A nightly backup of it is kept privately with Cloudflare in their Oceania region, so we can recover it if something goes wrong. These services handle parts of the site:

• Supabase — the database and sign-in system.
• Cloudflare — serves the site and stores uploaded photos.
• Resend — sends our emails: confirming your address, resetting a password, and the notices and reminders you can switch off on your account page.
• Stripe — takes tips, keeps the card details and emails receipts, under its own privacy policy.
• Google — sign-in, if you choose it, plus Tag Manager, Analytics and Ads.
• Meta — the pixel that measures our Facebook and Instagram posts and ads, and builds audiences for them.

Some of these operate overseas, which means your information may be stored or processed outside Australia.

Getting a copy, or getting it deleted

Ask us and we'll send you what we hold about you, correct anything that's wrong, or delete your account.

When an account is deleted we remove the profile and the email address. We may keep the reviews with the name removed, because deleting them would leave holes in information other people have relied on. If you want a specific review gone as well, say so and we'll remove it.

Complaints

Start with us. If you aren't satisfied with how we've handled it, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.