Privacy

Who is responsible

One More Ramen is an independent project run by Felipe Eiras. For any privacy matter, write to show email.

What is handled

• Hosting. The server (Vercel) receives your IP address, browser and the page requested, and keeps technical logs for a short time so the site works and stays secure.
• Approximate region. From your IP, the site estimates your region to order the cities on the home page from nearest to farthest and to know whether it needs to show the cookie notice. This estimate is not stored.
• Exact location, only if you ask. The “Ramen near me” button uses your device’s location only if you allow it in the browser. Distances are calculated on your device: your position is not sent to us.
• Usage analytics. Google Analytics and PostHog record pages viewed, clicks, visit length, device and browser type, approximate region and referring page. PostHog may also record how pages are browsed (scrolling, movements and clicks) so we can find usability problems. Whatever you type into fields (such as your sign-in email) is masked in recordings.
• Maps. The map on each house’s page loads images from OpenStreetMap, which receives your IP to deliver them.
• Offline use. The site keeps copies of the pages and photos you visited on your device so they open without internet. This stays on your device and is removed when you clear the site’s data in your browser.

Community account

The community is optional. If you create an account:

• Account. We keep your email, an internal ID, your sign-up date and preferred language. If you sign in with Google, it also sends your name and profile photo; we only use the email.
• Activity. The houses you marked as “Been there” (your passport), your vote for the next city and the houses you suggested, with link and comment if you add them. None of this is shown publicly under your name; the vote board shows totals only.
• Emails. We send your sign-in link and community updates tied to what you did: when the city you voted for joins the selection, how your suggestions are going and vote results. We also send general news (new cities, highlights) if that option is ticked at sign-up; in some countries it comes ticked, and you can untick it right there. Every email has a link to stop receiving it, and both options are in My account. We keep your choice and its date.
• Legal basis. Providing the service you asked for when creating the account, which includes community updates; for general news, your consent. You can turn either off at any time in My account or through the link in the email itself.
• How long. For as long as the account exists. Deleting it is one button in My account: it immediately erases your account, passport, vote and suggestions. Provider backups expire within a limited time.
• On your device. With an account, your browser keeps your session (local storage sb-*) so you stay signed in. Necessary for sign-in.

Cookies and on-device storage

• omr-consent (local storage): remembers your cookie choice. Necessary.
• Site cache (service worker): enables offline use. Necessary.
• _ga, _ga_* (Google Analytics): tell visits apart. Analytics, last up to 2 years.
• ph_* (PostHog, cookie and local storage): identify the visit and session, including for browsing recordings. Analytics, last up to 1 year.

In the European Union, the European Economic Area, the United Kingdom and Switzerland, analytics cookies are only used after you accept the notice. If you decline, Google Analytics receives only cookieless signals and PostHog counts the visit in aggregate, without storing anything on your device and without recording your browsing. In other countries, analytics runs by default.

Wherever you are, you can change your choice at any time in cookie preferences (also in the footer, under “Cookies”) or block cookies in your browser settings.

Why, and on what basis

• Delivering the site and keeping it secure: legitimate interest.
• Ordering cities by your region: legitimate interest, without storing the estimate.
• Understanding how the site is used and improving it: consent where the law requires it (Europe); legitimate interest elsewhere.

Data is not sold, not used for advertising and not used to build ad profiles.

Who it is shared with

Only with the providers that keep the site running, each under its own data protection terms: Vercel Inc. (hosting, USA), Google LLC (Google Analytics, USA), PostHog Inc. (usage analytics, servers in the USA), Supabase Inc. (community database and sign-in), Resend (community emails, USA) and the OpenStreetMap Foundation (maps, United Kingdom). Google also runs the “Continue with Google” button, if you choose to sign in with it.

International transfers

These providers are mainly based in the United States, so data may be processed outside your country. Transfers rely on the safeguards they offer, such as standard contractual clauses or the EU-US Data Privacy Framework, where applicable.

How long

Hosting technical logs: days to a few weeks. Analytics data: 14 months at most. Browsing recordings: 30 days at most.

Your rights

Depending on the law where you live (such as the GDPR in Europe or the LGPD in Brazil), you can ask to access, correct, delete or port your data, object to its processing and withdraw consent at any time. Members can see their own data in My account and delete the account right there. For anything else, write to show email and you will get an answer within 15 days. You can also complain to the data protection authority in your country.

Children

The site is not aimed at anyone under 16 and does not knowingly collect their data.

Changes to this policy

If this policy changes in a meaningful way, we will say so on the site and, for members, by email. The date of the current version is right below. How the selection works and the legal notice are in How it works.