Privacy Policy

This policy explains information used by Caribe’s website and apps. Version 2026-10-03.

Information you provide

We store account identifiers, name, email and any provided phone number; order items, options, totals, location and status; messages and offers; public reviews; and records of pickup-policy and Terms/Privacy acceptance. Order-related blocks, outstanding balances, payment records and staff actions are stored when applicable. Customers can view only their own private conversations and account information.

Login and necessary storage

Firebase Authentication provides account login, including optional Google sign-in. Firebase may use browser storage to keep you signed in. Caribe uses secure session cookies for authorized store and Manager access. Browser storage also keeps a cart, pending-order retry identifiers, guest-message access tokens, unsent message drafts and preferences. These support login, security, reliable ordering and messaging.

A signed, secure, HttpOnly guest-acceptance cookie may remember acceptance on that browser. Account acceptance is stored in the database and follows the account across devices. Clearing browser data removes local guest access and preferences. It does not erase records already stored by Caribe.

Visitor measurement and advertising attribution

Caribe also uses first-party measurement that is not required to place an order. A random visitor cookie, caribe_visitor, lasts up to one year and estimates unique visitors by browser/device. A signed caribe_attribution cookie lasts up to 30 days and stores advertising-link parameters such as utm_source, utm_campaign and utm_medium. We associate that origin with orders to measure submitted and completed orders. Different devices may count as different visitors. Known bots and business devices or staff sessions are excluded where recognized.

The current implementation does not load a third-party advertising pixel or Google Analytics library. Firebase configuration includes a measurement identifier, but that alone does not enable Google Analytics. This acknowledgment is not an advertising-consent checkbox.

Operation and security

We use this information to operate accounts, prepare and track orders, reply to messages, manage store work and investigate abuse or errors. Security checks may use network information such as an IP-derived hash and browser/device details. Acceptance records include the applicable policy versions, time, source and limited session/device references. Do not send payment-card details or passwords in messages.

Apps and staff features

The Manager Android app requests notification permission for alerts and can maintain a visible background connection while enabled. Message previews may appear in notifications according to device settings. Employee time-clock records, pay calculations and clock photos are available to authorized personnel. Microphone or camera features request device permission where used. Manager audio recordings and transcripts are saved locally on the device/browser in the current transcription feature; download them before clearing app data. A site visit does not itself activate a microphone or camera.

Services and access

Firebase/Google supports authentication. The hosting infrastructure uses Cloudflare database and file-storage services for the application’s records and supported uploads. These providers process information to deliver their services. Authorized Caribe personnel access information needed for their work. Public comments are public; private conversations are not a public feed. External links such as Google Maps open services with their own privacy policies.

Retention and choices

Records are kept as needed for operations, account history, payment and security purposes, and applicable obligations. There is no promised automatic deletion schedule for order or message history. Local recordings remain until you delete them or clear device data. You can sign out, manage device permissions or clear browser storage, though this can remove a saved cart or guest-message access. Contact Caribe through Message Caribe or a listed store to ask about access, correction or deletion of your information; we may need to verify identity and retain information required for legitimate records or legal obligations.

Policy updates

We keep versioned acceptance records. If a material change requires renewed acceptance, you will be asked to review it. Otherwise we do not ask on every login or visit.