Privacy Policy

Effective date: 10 August 2026Last updated: 11 August 2026

MenuCast is owned and operated by Frozen Crow Inc., 3744 E. Chapman Ave., Ste #F12358, Orange, CA 92859, United States (“Frozen Crow”, “we”, “us”). This policy explains what we collect when you use menucast.app and the MenuCast display apps, why we collect it, and what choices you have.

We have written this to describe what the service actually does. If something here does not match your experience, tell us — we would rather fix the discrepancy than have a policy that reads well and is wrong.

---

1. Who this covers

• Customers — people and businesses with a MenuCast account.
• Visitors — anyone browsing menucast.app without an account.
• Subscribers — anyone who joins our mailing list.

If you are a customer’s employee using an account your employer controls, your employer decides how that account is used; contact them first with questions about it.

2. What we collect

You give us

We do not collect payment card numbers. Card details are entered directly with Stripe and never reach our servers. We store only Stripe’s identifiers for your customer and subscription records, plus your plan and billing status.

Collected automatically

• Account and usage records — screens paired, playlists, designs, subscription status, and timestamps.
• Device information from your screens — a device identifier, the screen name you choose, and orientation. The display apps do not collect location, contacts, microphone, or camera data.
• Server logs — IP address, browser type, pages requested, and timestamps, kept by our host for security and troubleshooting.
• Marketing attribution — if you reach us from an advert, a search engine, a newsletter, or a link on another site, we record the campaign parameters in the address you arrived on (utm_source and the like), any advertising click identifier the platform appended, the page you landed on, and the address of the site that referred you. We keep the first one and the most recent one. This tells us which adverts are worth paying for. It is not used to make decisions about you, and it is never combined with data from other companies.
• Support context — when you use “Get help” in your dashboard, we attach your account email, plan, subscription status, screen allowance, and workspace identifier so you do not have to explain them.

3. Something important about published designs

When you publish a design, the resulting image is stored at a public web address.

This is how it works: your screens are televisions and media players in your venue. They fetch their content without logging in, which means the image has to be reachable by anyone who has the URL. The address is long and not listed or linked anywhere, and we do not publish it — but it is not protected by a password, and it is not secret.

Do not put confidential or personal information in a design. Menu boards, prices, and promotional images are fine. Anything you would not want a stranger to see is not.

4. Why we process your data, and on what basis

• To provide the service — performing our contract with you.
• To bill you — performing our contract, and our legal obligation to keep tax records.
• To support you — performing our contract and our legitimate interest in running a business people can get help from.
• To keep the service secure — our legitimate interest in preventing abuse, fraud, and unauthorised access.
• To send marketing email — only with your consent, which you give by subscribing or ticking the opt-in box, and can withdraw at any time.

We do not sell your personal information, and we do not share it for cross-context behavioural advertising.

5. Who we share it with

We use a small number of service providers. They only receive what they need, and only to provide their service to us.

We may also disclose information if the law requires it, to enforce our terms, or to protect the rights and safety of our customers or the public. If we are ever involved in a merger or acquisition, account data may transfer as part of that business — we will say so before it happens.

6. Cookies and similar technology

• Essential — WordPress sets cookies to keep you logged in and to protect forms against cross-site request forgery. The service does not work without them.
• Support session — if one of our staff is viewing your account to help you, a short-lived cookie records that session so it can be ended and audited. It expires within two hours.
• Attribution — a first-party cookie (mc_attr) recording how you first found menucast.app and how you most recently came back, so we can tell which marketing is working. It lasts 180 days, belongs to this site alone, and cannot be read by anyone else. Blocking it costs you nothing.
• Language — remembers your language choice if you change it.
• Live chat — customers on a paid plan see a chat widget on their dashboard, provided by LeadConnector, which sets its own cookies to keep a conversation going.

We do not use advertising or cross-site tracking cookies.

7. How long we keep things

• Account data — for as long as your account is open, and up to 90 days after you close it, so an account closed by mistake can be restored.
• Designs and uploaded images — until you delete them, or up to 90 days after your account closes.
• Billing records — seven years, because tax law requires it.
• Support conversations — up to three years.
• Newsletter records — until you unsubscribe, plus a record of the unsubscribe so we do not email you again by accident.
• Server logs — typically 30 days.

8. Your rights

Wherever you live, you may ask us to:

• Access the personal information we hold about you.
• Correct anything wrong.
• Delete your information, subject to records we must keep by law.
• Export your data in a portable form.
• Object to or restrict certain processing.
• Unsubscribe from marketing at any time — every marketing email has an unsubscribe link, and using it does not affect service emails about your account.

If you are in California, the CCPA/CPRA gives you the rights above, the right to know what categories we collect and disclose, and the right not to be discriminated against for exercising them. We do not sell or share personal information as those terms are defined, so there is nothing for you to opt out of on that front.

If you are in the UK, EU, or EEA, the UK GDPR and GDPR give you the rights above plus the right to complain to your supervisory authority. Where we transfer data to the United States, we rely on Standard Contractual Clauses or equivalent safeguards with our providers.

To exercise any of these, email support@lc.menucast.app. We will verify who you are before acting — usually by confirming control of the account email — and respond within 30 days, or 45 where the law allows and we tell you why.

9. Security

Passwords are hashed. Credentials we hold for third-party services are encrypted at rest. Traffic to menucast.app is served over HTTPS. Access to customer data by our staff is limited to what support requires.

Support access: an administrator can view your dashboard as you, in order to reproduce a problem. This never requires or reveals your password, every session is recorded with who did it and when, and a banner is shown throughout. If you would rather we did not do this, say so and we will work from screenshots instead.

No system is perfectly secure. If we become aware of a breach affecting your personal information, we will notify you and any regulator as the law requires.

10. Children

MenuCast is a business tool and is not directed at children. We do not knowingly collect personal information from anyone under 16. If you believe a child has given us information, contact us and we will delete it.

11. Changes

If we change this policy we will update the date above. For changes that materially affect your rights, we will email account holders at least 14 days before they take effect.

12. Contact

Frozen Crow Inc.

3744 E. Chapman Ave., Ste #F12358

Orange, CA 92859

United States

Privacy questions and requests: support@lc.menucast.app