Privacy policy

The short version

MassageMenu is built to know as little as possible. Salon owners give us one email address. Guests give us nothing that identifies them — no name, no phone number, no account. Session cards are anonymous and delete themselves after 30 days.

What we store about salon owners

Your email address — it is your login and the only way we can contact you.

Your salon profile: name, address, phone, opening hours, links, menu, prices, photos you upload, and a front-desk PIN which we store only as a hash. We also record when you accepted the terms of service.

A sign-in cookie on your device (httpOnly, expires after 30 days), and a similar cookie on the tablet your staff unlock with the PIN. We use no advertising or analytics cookies.

What we store about guests

A session card: the chosen treatment, duration, pressure, body-map areas, optional extras, the language used, and any health restrictions the guest chooses to flag (for example pregnancy or blood pressure). None of it is linked to a name, phone number, device ID or account — we could not tell you who a card belongs to.

Health flags exist for one purpose: so the therapist works safely. They are shown to the salon on the reception screen and deleted with the rest of the card.

Notes your staff type on a card at reception (room, preferences) are stored with that card and deleted with it.

Session cards are deleted automatically 30 days after they are created. Backup copies of the database can persist for up to 60 more days before they expire; backups are used only to recover from disasters, never to read individual cards.

The guest's own device remembers the chosen language and the last session card in its browser storage — that stays on the device and is never sent to us.

Anonymous usage pings (which kiosk screen was opened, in which language) that contain no identifier at all.

Server logs

Like almost every website, our servers keep short-lived access logs (IP address, requested URL, browser type) for security and debugging. They are not used for profiling and are not joined with session cards.

Who processes data for us

Vultr (Singapore) hosts the servers and database. Resend delivers sign-in emails to salon owners. Better Stack receives our server logs and uptime checks. Namecheap provides DNS. None of them may use the data for their own purposes.

We do not sell or share data with advertisers, and there are no third-party trackers on any page.

Your choices

Salon owners: email us and we will show you everything tied to your account or delete the account entirely.

Guests: there is nothing to request — cards are anonymous and self-deleting. If you do not want to flag a health restriction, skip that step; the menu works without it.

Changes and contact

If this policy changes in a way that matters, we will say so on this page and, for salon owners, by email.

Questions: hello@massagemenu.space