Privacy Policy

Last updated: 3 November 2026

Bite Rush is a portfolio project, not a real business. It was built by Ajitabh Kumar Jha to show full-stack skills. No real food is prepared or delivered, and payments run in Razorpay test mode, so no real money is charged.

1. Who this applies to

This policy explains what personal information Bite Rush (a portfolio project by Ajitabh Kumar Jha, "we", "us") collects when you use this website, why, and what you can ask us to do with it. Because this is a demo, please do not enter details you would not want stored. You can use made-up details for the name and address.

2. What we collect

Account: your name, email address and password. The password is stored only as a salted bcrypt hash, never in plain text.
Food orders: the items you order, the total, the time, and the delivery details you type in: name, phone number, address, area, optional landmark and pincode. The address is saved with that order only. We do not keep an address book.
Table bookings: the date, time slot, number of guests, table, booking status and deposit and refund status.
Payment references: Razorpay order, payment and refund ids for table deposits and online food orders. We never see or store your card, UPI or bank details. Those are handled by Razorpay.
Technical data: our hosting provider and server keep request logs, which include your IP address, the page requested, and the time. We use your IP address for rate limiting to prevent abuse.

3. Why we use it

To create your account and keep you logged in.
To take, show and manage your food orders and table bookings, including showing orders to the admin.
To process deposits and refunds.
To keep the site secure and working, for example rate limiting and debugging.

We do not sell your data, send marketing emails, or use advertising or analytics trackers.

4. Browser storage

The site stores three items in your browser's local storage: biteRushToken (your login token, valid for 7 days), biteRushUser (your name and email, so the page can greet you) and biteRushCart (your cart). We do not use tracking cookies. Logging out removes the login items, and you can clear all of them from your browser settings at any time.

5. Who else handles your data

These services process data on our behalf or load content on the pages:

Render hosts the website and the API.
MongoDB Atlas hosts the database.
Razorpay processes table deposits, online food payments and refunds (test mode).
jsDelivr serves Bootstrap and icon files, Google Fonts serves fonts, Google Maps shows the embedded map, and Unsplash and placehold.co serve images. Your browser contacts these services directly, so they may see your IP address.

Each of these has its own privacy policy. Some of them process data outside India.

6. How long we keep it

We keep your account for as long as it exists. Order and booking records are kept for up to 3 years, then deleted. Server logs are kept by the hosting provider for its standard period.

7. Your choices

You can ask us to give you a copy of your data, correct it, or delete your account and the personal details linked to it. Email projectsaj13@gmail.com from the address you registered with and we will reply within 30 days. Where records must be kept, such as payment references, we will keep only what is needed and remove the rest.

8. Children

This site is for people aged 18 and over. We do not knowingly collect data from children.

9. Security

Passwords are hashed, connections use HTTPS, and the API applies rate limits and security headers. No system is perfectly secure, so please use a password you do not use elsewhere.

10. Changes

If we change this policy, we will update the date at the top of this page.

11. Contact

Questions about this policy: projectsaj13@gmail.com.