Privacy policy
What we keep, and for how long.
Short version: when you order, we keep your name, the phone number if you give one, and what you ordered, so we can make it and call you. Finished orders are deleted after a day. No accounts, no ads, no tracking.
Last updated 24 October 2026. This policy covers the website www.nobullkebab.pl and the No Bullshit Kebab app.
Who we are
No Bullshit Kebab is run by Karol Krakowski, Al. Kijowska 35/4, 30-079 Kraków, Poland (NIP 6772488097, REGON 523941864). That is the controller of your data. Write to hungry@nobullkebab.pl about anything on this page.
What we collect when you order
- Your name, to call out when your order is ready.
- Your phone number, only if you type one in, so we can reach you about that order (for example if something ran out).
- Your order: what you chose, the price, any note you add for the kitchen, whether you pick up or wait at the booth, and the time.
- Payment status: whether the order is paid. If you pay online, the card or BLIK details go straight to our payment provider, Stripe; we never see or store them, only Stripe's reference for the payment.
The legal basis is taking and fulfilling your order (Article 6(1)(b) GDPR). We use the data for nothing else: no marketing, no profiling, no selling or sharing it with anyone beyond the providers below.
How long we keep it
A collected or cancelled order is deleted automatically one day later. An online order that was never paid is deleted after an hour. If you paid online, Stripe keeps its own record of the payment as the law requires for accounting; see Stripe's privacy policy.
Who processes it for us
- Vercel hosts the website and the ordering system (servers in Frankfurt, Germany).
- Upstash stores the live orders (database in Frankfurt, Germany).
- Stripe processes online payments, when you choose to pay online.
Each of them acts only on our instructions under a data processing agreement.
What stays on your device
Your cart, the list of your recent orders, and whether you muted the sounds are kept on your phone or in your browser only (local storage), so they survive a reload. We cannot see them. Deleting the app or clearing the site's data removes them. The app uses your phone's motion sensor only to tilt a picture on screen; nothing about it leaves the device.
What we do not do
No accounts and no passwords. No analytics, advertising or tracking tools, in the app or on the website. The only cookies are the one our own staff use to sign in to the kitchen board and, when you pay online, the ones Stripe's payment form sets to prevent fraud.
Your rights
You can ask us for a copy of your data, to correct it, or to delete it before the automatic deletion, and you can object to its use. Write to hungry@nobullkebab.pl with your order number; we answer within 30 days, usually much sooner. You can also complain to the Polish data protection authority, the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warszawa.
Children
The website and the app are for ordering food and are meant for a general audience. If you are under 16, please order with a parent or guardian.
Changes
If what we collect changes, we update this page and the date at the top before the change goes live.