Logo Yumder
DE EN

Privacy Policy

Last updated: 12.10.2026 ~20 min read Teständerung2

Privacy Policy

This policy applies to the Yumder app (app.yumder.app), the websites yumder.app and partner.yumder.app, the partner portal, and related emails.

1. Privacy at a Glance

What Yumder Is All About

Yumder helps groups find a restaurant with a simple swipe. To do this, we process only the data necessary for the service. We do not use advertising or tracking cookies, do not integrate third-party analytics services (e.g., Google Analytics), and load fonts from our own server.

What data is collected?

  • Without an account (Guest): Name at the table, table location and filters, swipes, and votes. Tables are deleted after 48 hours. Favorites, history, and settings are stored in your browser.
  • With an account: Email address, optional display name and username, favorites, match history, progress (XP, level, collectible cards, quests), groups, posts (photos, menus), and ratings.
  • When purchasing Yumder Plus: Payment data is processed by Stripe. We do not see any card or account numbers.
  • As a restaurant partner: contact and business information, photos, team access, and subscription details.

What are your rights?

You have the right at any time to access, correct, delete, restrict, and request data portability, as well as the right to object and to file a complaint with a supervisory authority. You can access your data, export it, and delete your account in the app under Profile › Your Data. Details are provided in Section 13.

2. Data Controller

The data controller is:

Adam Weiß
Auer Str. 47, 76287 Rheinstetten, Deutschland

Phone: Not listed to prevent spam; we’ll be happy to call you back
Email: info@mineco.de

The data controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data.

3. Hosting and Server Log Files

Hosting by Contabo

We host our servers with Contabo GmbH, Welfenstraße 22, 81541 Munich, Germany. Data from the app, websites, and mail server is stored on this server in Germany. We have a contract with Contabo for data processing in accordance with Article 28 of the GDPR. The legal basis is our legitimate interest in secure, fast, and stable operation (Article 6(1)(f) of the GDPR) and, to the extent that contracts are being fulfilled, Article 6(1)(b) of the GDPR.

Server Log Files

When you visit our pages, the web server automatically collects technical data: IP address, date and time, requested URL, status code, amount of data transferred, browser and operating system, and, if applicable, the previously visited page. This serves security and troubleshooting purposes (Art. 6(1)(f) GDPR). The log files are deleted after 14 days. They are not combined with any other data.

To protect against misuse (e.g., excessive requests), the app temporarily counts requests per IP address in RAM. These counters are not permanently stored.

Legal Documents

The Terms of Service, Privacy Policy, Right of Withdrawal Notice, and Legal Notice are available at legal.yumder.app. The site runs on our own server; when accessed, the server log files described above apply; no third-party services are integrated.

Status Page

Uptime Kuma runs on our own server at status.yumder.app. The same server log files as mentioned above apply; no third-party services are integrated.

Country Access

We may restrict access based on country (e.g., during the launch phase). To do this, the IP address is assigned to a country locally on our server without sending it to third parties and without storing the result.

SSL or TLS Encryption

For security reasons, these pages use TLS encryption. You can recognize an encrypted connection by “https://” and the lock icon in your browser.

4. Using the App Without an Account (Guest)

Anonymous Identifier

When you first launch the app, it generates a random identifier (UUID) and stores it in your browser’s local storage. The app needs this to recognize you at a table, assign your swipes, and save your favorites and history. Legal basis: Art. 6(1)(b) GDPR and § 25(2)(2) TDDDG (technically necessary). We do not use the identifier to track or recognize you across multiple tables. It is deleted from the table data along with the table after 48 hours and remains only on your device thereafter.

Tables

When you start or join a table, we store: table code, location or ZIP code, location coordinates, radius, filters (cuisine, dietary preferences, price, “open only”), your name at the table, your role (creator or participant), your swipes (Yes/No), vetoes, matches, and joker results. Your name at the table is visible to all participants. Please choose a name that does not necessarily identify you. Creators can remove participants from the table.

Tables and all associated participant, swipe, and match data are automatically deleted 48 hours after creation. Legal basis: Art. 6(1)(b) GDPR.

Match Page and Link Preview

After a match, a page displaying the result is generated, which can be shared via a link. It shows the restaurant and, in preview images and text (Open Graph) in messaging apps and social networks, up to three names of the participants. The page is not indexable by search engines. Anyone with the link can access it as long as the match is saved. Therefore, choose a name at the table that you’re comfortable with appearing in a link preview (e.g., first name or nickname), and share the link only with people you want to reveal the names to.

Location Suggestions and “My Location”

When you type in a location, we send the search text via our server to a geocoding service (Photon by Komoot, based on OpenStreetMap) to generate suggestions. When the table is launched and in “Discover,” we verify the location via Nominatim (OpenStreetMap Foundation). The requests are routed through our server; your IP address and device remain hidden from the services. After you enter the location, the services see the search text you entered.

“My Location” only retrieves your device’s location after you’ve entered it and granted permission in your browser. The coordinates are sent to our server and from there to Nominatim for location determination (reverse geocoding). The coordinates are rounded to approximately 1 km on your device during this process. The location name and these rounded coordinates are stored for the table search until the table is deleted after 48 hours. Legal basis: Your consent via browser authorization (Art. 6(1)(a) GDPR, § 25(1) TDDDG), which you can revoke at any time in your browser.

Restaurant information, images, hours of operation

Restaurant data (name, address, cuisine, opening hours) comes from OpenStreetMap (Overpass API) and Overture Maps and is retrieved from our server. No user data is transmitted in this process. Only our own images (partner, user, and admin photos) and stock photos that we have downloaded from Pexels and stored locally are displayed. When these images are displayed, your browser does not connect to Pexels.

Advertisement Cards (“Ad”)

Advertisement cards (featuring local restaurants and affiliate partners) may appear in the stack. We count clicks on these cards without personal identification, on a per-card and per-day basis. If you click on an affiliate card to visit the partner’s site, you will leave our site. See Section 10.

Error Log

If errors occur, we store the error message, the page accessed, the browser identifier (user agent), and, if applicable, the table code to resolve the errors (Art. 6(1)(f) GDPR). These entries are deleted after 30 days.

Statistics

We analyze usage in aggregate form (e.g., number of tables, swipes, matches, clicks on a restaurant’s phone number, menu, or website). The daily statistics do not contain any names or email addresses and are stored permanently; individual data is deleted along with the table.

5. Account and Registration

Sign-up via Email Code

All you need to create an account is your email address. We’ll send you a six-digit code that you enter in the app. There is no password. The code, email address, and timestamp are stored until the code expires (10 minutes) and are deleted shortly thereafter. After logging in, we store a session (cookie “yumder_user_session,” 30 days) so that you remain logged in. Legal basis: Art. 6(1)(b) GDPR; the cookie is required under § 25(2)(2) TDDDG.

When you log in for the first time, we transfer your previous guest data (favorites, history) to your account.

What We Store in Your Account

  • Email address, login method, creation date
  • Display name and username (the username is visible for invitations to groups; the email address is never visible)
  • Favorites and match history (for synchronization across devices)
  • Yumder Plus status, Stripe customer number, expiration date
  • Progress: XP, level, streaks, collectible cards, event cards, quests, match ratings
  • Groups, memberships, and invitations
  • Consents to legal texts (see Section 9)

The legal basis is the performance of the User Agreement (Art. 6(1)(b) GDPR).

Reviews and Posts

You can rate matches and upload photos and menus for restaurants. We review uploaded files before publication. Approved photos appear as “Guest Photos” in the restaurant’s details. The photo itself does not contain any names. However, we store the account that submitted it (for XP and to prevent abuse). By uploading the photo, you confirm that you hold the rights to it, that no recognizable individuals are visible in it, and that you authorize us to display it in the app. We record this confirmation for each post, including the text, time, and a truncated IP address (Art. 6(1)(f) GDPR: evidence).

By uploading the photo, you grant us the right to display it in the app free of charge, worldwide, and for an unlimited period of time. If your account is deleted, photos that have already been approved will therefore remain in the app without any association with you.

Groups

Plus members can create groups. Invitations are sent using the exact username, and the invitation must be confirmed. Members can see each other’s usernames and the group’s shared match archive.

Data Access, Export, and Deletion

In the app, under Profile > Your Data, you’ll find the functions “Export Data” (file yumder-data-export.json), “Request Data Report,” and “Delete Account.” To delete your account, confirm via a code sent in an email. This will delete your account, favorites, history, group memberships, progress, and sessions, and your Stripe customer account will be closed. Consent records will be anonymized. Data that we are required to retain for tax and commercial law purposes (in particular, invoice and payment data stored with Stripe and in our accounting records) will remain on file until the end of the statutory retention periods (Art. 6(1)(c) GDPR).

6. Cookies and Local Storage

Yumder does not use cookies for advertising or analytics purposes. Only technically necessary data is stored on your device (Section 25(2)(2) TDDDG, Art. 6(1)(f) GDPR). A consent request (“cookie banner”) is not required for this.

Cookies

  • yumder_user_session: maintains your login (30 days, only via HTTPS and unreadable by JavaScript).
  • partner_session: maintains your session in the partner portal (30 days).
  • Admin cookie: for our team’s use in the administration area only.

Local Storage

The app stores the following entries in the browser, among others: anonymous identifier, participant ID and code of the current table, display name, favorites, match history, last location, selected deck and game mode, language, color scheme (light/dark), sound, haptic feedback, and effects; viewed notices and tutorials; hidden banners; a prompt to install the app; acceptance of the Terms of Service (checkmark); and a draft of the partner application. This data remains on your device until you delete it (via browser settings or “Clear All App Data” in the app). Favorites and history are also backed up to our server if you have an account.

Our websites yumder.app and partner.yumder.app only store your chosen language and color scheme locally.

Installable App (PWA)

You can add Yumder to your home screen. No additional personal data is collected during this process. We do not send push notifications.

7. Yumder Plus and Payments

Stripe

For purchases of Yumder Plus (subscription, lifetime, 24-hour pass) and for Boost subscriptions from partners, we use the payment service provider Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Dublin 2, Ireland (parent company: Stripe, Inc., USA). Payment is processed on the Stripe website. In doing so, Stripe processes the data necessary for the payment—such as name, email address, payment method, billing address, and amount—as a separate data controller for fraud prevention and legal obligations, and as our data processor with regard to payment processing on our behalf. We receive the customer ID, payment status, amount, product, time period, and email address from Stripe. We do not see any card details. After your purchase, we will send you a confirmation email containing the cancellation policy. Data transfers to the U.S. are based on the EU-U.S. Data Privacy Framework decision and/or standard contractual clauses. For more information: https://stripe.com/de/privacy.

Legal basis: Art. 6(1)(b) GDPR (contract), Art. 6(1)(c) GDPR (retention obligations).

Purchases Only with an Account

Purchases are only possible with an account. For the payment process, we provide Stripe with your account email address.

Cancellation (cancel button)

If you cancel a purchase, we store your statement for record-keeping purposes: name, email address, contract, any voluntary information you provided (e.g., purchase date), the time of the request, and whether it was submitted via the app or the web form. We will send you a confirmation of receipt via email and process the subscription cancellation and refund. Legal basis: Art. 6(1)(c) GDPR in conjunction with § 356a BGB and Art. 6(1)(b) GDPR. We delete the declaration 3 years after completion; invoice and payment data are retained in accordance with statutory retention periods.

We protect the web form from automated abuse without using third-party services (hidden field, minimum time limit, limit on requests per IP address and email address; Art. 6(1)(f) GDPR). No third-party CAPTCHA is loaded in this process.

Crediting the 24-Hour Pass

If you switch from a current pass to a subscription or lifetime pass, we will record the amount paid in order to apply it toward the new plan.

Retention

We retain payment and billing data in accordance with the retention periods under tax and commercial law (currently, as a rule, up to 8 years, § 147 AO, § 14b UStG).

8. Partner Portal and Restaurant Applications

Restaurants can claim their listing, manage it in the Partner Portal, and use the paid Boost subscription (partner.yumder.app). To do this, we process:

  • Email address (confirmation via code, registration via code), business name, contact person, phone number, address
  • Listing details: photos, menu, Instagram handle, website, reservation link, hours of operation, discount code, banner text
  • Team accounts (email addresses of invited individuals)
  • Subscription data (Stripe customer number, status, trial period, term)
  • Statistics on your listing (views, swipes, matches, clicks, aggregated, without guests’ names)
  • Consent to the Partner Terms and Conditions, including the date and time and a truncated IP identifier

We will send you registration and status emails as well as—unless you opt out—a weekly report and reminders regarding the trial period (Art. 6(1)(b) and (f) of the GDPR). You can unsubscribe from reports for each location in the portal.

If you remove a location, photos, the menu, and details remain recoverable for 30 days and are then deleted. An anonymized identifier remains in place to prevent a trial period from being booked twice (Art. 6(1)(f) GDPR).

You will not see guests who submit photos of your restaurant. If someone submits a photo, you will not know who it was.

9. Consent and Verification Data

When you confirm the Terms and Conditions, Privacy Policy, Right of Withdrawal Notice, or other notices (e.g., upon login, purchase, photo upload, or in a partner application), we store the following for verification purposes: the document and version, reason, time, browser identifier, and a truncated, non-reversible hash of the IP address. Legal basis: Art. 6(1)(f) GDPR (proof of lawfulness); for purchases, also (c). We delete this evidence after 3 years.

10. External Services and Links

Services accessed from our server

These services receive data from our server, not from your device. Your IP address is not shared.

  • Photon (Komoot GmbH, Potsdam): Location suggestions, search text. photon.komoot.io
  • Nominatim (OpenStreetMap Foundation, United Kingdom): Location verification, coordinates, search for restaurants in the claim. The United Kingdom has an EU adequacy decision.
  • Overpass API and Overture Maps: Restaurant data, no user data.
  • Pexels: Stock photos, stored locally, no user data.

The legal basis is our legitimate interest in operating the app (Art. 6(1)(f) GDPR) or the performance of a contract (Art. 6(1)(b) GDPR).

Links to Other Sites

When you tap on links in the app (map, website, Instagram, menu, reservation, order, phone call), you leave Yumder. Your browser then connects to the destination site, which processes data as a separate data controller. These include:

  • Google Maps: The map link opens Google Maps with the restaurant’s name and address (Google Ireland Limited). We do not embed a map. Data is only transmitted to Google when you tap the link.
  • Instagram, websites, menus, and reservation portals of restaurants, as well as delivery services.
  • Affiliate links: We currently have no active affiliate partners. Should we display labeled affiliate links in the future that lead to a provider via a partner network, the network may set cookies when you tap the link to track a purchase. We will update this statement accordingly in advance.

We count clicks on these links anonymously for each restaurant or advertising partner.

11. Emails, Support, and Waiting Lists

Sending Emails

Login codes, confirmations, account notifications, partner subscription information, and the partner report are sent exclusively via our own mail server on our server in Germany; no third-party email service is used. Emails may be intercepted during transmission if the recipient does not support encryption.

Email Inquiries and Support

If you contact us via email or through our ticket system (FreeScout, support.mineco.de, hosted on our own server), we will store your information to process your inquiry and for any follow-up questions. Legal basis: Art. 6(1)(b) or (f) of the GDPR. We retain inquiries until they are resolved and thereafter until the statute of limitations expires (3 years from the end of the year), unless a longer retention requirement applies. Upon request, we will delete them earlier.

Waiting Lists (Region and Partner Early Access)

At yumder.app/soon/, you can sign up for news from your region or, as a restaurant, for early access. We store your email address, country, city or neighborhood, business name (for partners), time, IP address, and browser identifier. We’ll send you a confirmation email (double opt-in); only then will you be considered registered. The IP address is stored only in truncated form (last digits removed). We delete unconfirmed entries after 30 days and confirmed entries no later than 24 months after confirmation, or earlier if you revoke your consent. Legal basis: Your consent (Art. 6(1)(a) GDPR), which you may revoke at any time, e.g., via the link in the email or by emailing us.

12. yumder.app and partner.yumder.app Websites

The websites are static. They load fonts and images from our own server (Bricolage Grotesque and Plus Jakarta Sans, hosted locally; no connection to Google is established). They contain no trackers, analytics tools, or embedded social media features. The site retrieves data from app.yumder.app for display purposes (e.g., trends and prices); in doing so, only the IP address is processed, just as when visiting any website. The form for signing up for the waiting list is described in Section 11.

13. Your Rights

Access, Correction, Deletion

Within the scope of legal provisions, you have the right at any time to receive, free of charge, information about your stored data, its origin and recipients, and the purpose of processing, as well as the right to have it corrected or deleted, if applicable. In the app, you can access this via Profile › Your Data. We will respond to requests within one month.

Restriction of Processing

You may request a restriction on processing if you dispute the accuracy of the data, if the processing is unlawful, if you need the data to defend legal claims, or if you have filed an objection and the matter is still pending.

Data Portability

You have the right to receive data that we process automatically based on your consent or to fulfill a contract in a commonly used, machine-readable format. The export feature in the app provides you with this data as a JSON file.

Withdrawal of Consent

You may withdraw your consent at any time with future effect. The lawfulness of the processing carried out up to that point remains unaffected.

Right to Object (Art. 21 GDPR)

IF DATA PROCESSING IS BASED ON ART. 6(1)( E OR F OF THE GDPR, YOU HAVE THE RIGHT AT ANY TIME, FOR REASONS RELATED TO YOUR SPECIFIC SITUATION, TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA. WE WILL THEN NO LONGER PROCESS THE DATA, UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS THAT OUTWEIGH YOUR INTERESTS, RIGHTS, AND FREEDOMS, OR THE PROCESSING IS NECESSARY FOR THE ESTABLISHMENT, EXERCISE, OR DEFENSE OF LEGAL CLAIMS. IF YOUR DATA IS PROCESSED FOR DIRECT MARKETING PURPOSES, YOU MAY OBJECT AT ANY TIME; IN THAT CASE, WE WILL NO LONGER USE IT FOR THAT PURPOSE.

Right to File a Complaint with the Supervisory Authority

In the event of violations of the GDPR, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, your workplace, or the location of the alleged violation. The supervisory authority responsible for us is the State Commissioner for Data Protection and Freedom of Information in Baden-Württemberg, Lautenschlagerstraße 20, 70173 Stuttgart.

14. Recipients, Third Countries, Automated Decisions

Recipients

We only disclose data if it is necessary for the contract, if we are legally obligated to do so (e.g., tax authorities), if we have a legitimate interest, or if you have given your consent. Recipients include: Contabo GmbH (hosting, data processor), Stripe (payments), and the services listed in Section 10. We have contracts with data processors in accordance with Article 28 of the GDPR.

Third Countries

We store your data in Germany. Data may be transferred to third countries only in connection with Stripe (U.S.) and when accessing external links (e.g., Google Maps), based on the adequacy decisions or standard contractual clauses of the respective providers.

No Automated Decision-Making

No automated decision-making, including profiling, with legal or similarly significant effects takes place. The order of the cards is shuffled randomly for each participant; the joker is selected at random. Partners with Boost are displayed more frequently when filters match and are marked as “Ad.”

15. Data Retention Period at a Glance

  • Tables, participants, swipes, matches: 48 hours
  • Login codes: Valid for 10 minutes, then deleted shortly thereafter
  • Session cookies: 30 days
  • Error logs: 30 days
  • Log of changes in the admin area: 1 year
  • Account, favorites, history, progress: until the account is deleted
  • Removed partner locations: recoverable for 30 days, then deleted
  • Unconfirmed waiting list entries: 30 days
  • Payment and billing data: statutory retention periods
  • Cancellation notices: 3 years after completion
  • Server log files: 14 days
  • Proof of consent: 3 years
  • Support requests: until resolved plus the statute of limitations (3 years as of the end of the year)
  • Confirmed waiting list entries: until revoked, no later than 24 months after confirmation

16. General Information and Changes

We take the protection of your data seriously and treat it confidentially. Security vulnerabilities may exist when transmitting data over the Internet (e.g., via email); it is not possible to provide complete protection against access by third parties. You must be at least 16 years old to create an account; purchases are restricted to adults only. We will update this policy if our services or the legal landscape change. The most current version available at legal.yumder.app applies.