privacy policy

Karen is nosy, not creepy. here's the whole story.

Last updated: 1 October 2026

The short version: no account, no sign-up, no tracking cookies, no ads, and we never sell anything about you. justpick only uses what it needs to find restaurants near you, and it keeps almost none of it. The one thing we do keep is our own anonymous visit stats, also sent to Bascorp's own reporting service (see "our own visit stats" below): never your IP address, your name or anything you type.

Karen was disappointed too. She had questions.

who we are the responsible party, officially. Karen is responsible for everything else.

justpick (justpick.lol and justpick.wtf) is operated by Bascorp, South Africa. For this policy, that is the "responsible party" under the Protection of Personal Information Act, 2013 (POPIA), and "we" and "us" below.

Questions, requests or complaints: [email protected].

what we use, and why spoiler: not much. the sorting hat knows more about you.

Your location — only if you tap "use my location" and your browser asks you first. Your coordinates are sent to our search service to find restaurants near you. We don't store them against you, and we never ask for location if you type an area instead.
The area you type — sent to our search service to suggest places and find where that is.
Your picks — the budget, cuisines and dealbreakers you choose are sent with the search so the results match. They are not linked to you.
Search results — kept in a short-lived cache (about 45 minutes) keyed by area, not by person, so the next person nearby gets a fast answer.
Your IP address and country — every website sees these. We use them only to stop abuse (a per-address limit on how many searches can run a minute) and to show prices in the right currency. They are not kept in a profile.
Recent picks — your last few restaurants are saved in your own browser (local storage) so Karen can remember them. They never leave your device. Clear your browser data and they're gone.
Group rooms — only if you start or join one. A room keeps the nickname you type, the deck of places, and everyone's yes/no swipes, so it can pick for the group. The people in your room see your nickname. There are no accounts: your browser holds a room pass for that tab only, and forgets it when you close the tab. Every room and everything in it is deleted 24 hours after it was started.
Visit counts — Cloudflare Web Analytics counts page visits without cookies or personal profiles. We also keep our own anonymous visit stats (see "our own visit stats" below).

We do not ask for your real name (a room nickname can be anything you like), phone number, email address or payment details. If you email us, we use your email only to reply.

Karen doesn't need your name. She's already got a nickname for you.

our own visit stats Karen counts heads, not faces

To see whether justpick actually helps people pick, we count visits ourselves. We keep: a random ID your browser makes (so we can tell a new visit from a repeat one — it isn't linked to you), your country and city as Cloudflare reports them, whether you're on a phone, tablet or computer and which browser family, the website that sent you (just its name, like google.com) and any campaign tag in the link, your language setting, how long the page was open on your screen, and what you did in the app (for example: searched, how many cuisines you picked, matched, created or joined a group room, shared).

We never keep your IP address, your exact location, your browser's full identity string, your name, nickname or anything you type. None of it is sold or shared outside Bascorp, and it is deleted after 13 months. If your browser sends Global Privacy Control or Do Not Track, justpick sends nothing at all.

The same anonymous stats also go to Bascorp HQ, Bascorp's own reporting service, so we can see all our sites in one place. Same rules there: which screens are viewed and what you did in the app, roughly where visitors are (country and city, never your exact location), the kind of device, the site that sent you and how long the page was open, plus, for about one visit in three, where on the page people tap and how far they scroll, as positions only. Never your IP address, your browser's identity string, your name or nickname, anything you type, or the text of anything you tap. It uses its own random number in your browser to tell a new visit from a repeat one, and that isn't linked to you either. Kept for 13 months, then deleted automatically. Global Privacy Control or Do Not Track still means nothing is sent at all.

Karen reports to head office. Head office doesn't know your name either.

who it goes to a very short guest list. tighter than a Bok defence.

Google (Places) — searches, area look-ups and restaurant photos go through our service to Google Places. Google sees our service, not your browser. Google's own privacy policy applies to its data.
Cloudflare — hosts the site, our search service and Bascorp HQ, and runs the visit counter. It processes requests (including IP addresses) to deliver the site and keep it secure.
Links you tap — Google Maps, delivery apps, restaurant websites and Ko-fi are other companies' sites. Once you leave justpick, their privacy policies apply. The share buttons just open WhatsApp, Facebook, X or Telegram with a link when you tap them — justpick loads none of their scripts or trackers, and we only count which button was tapped.

Some of these providers process data outside South Africa. We only use providers that protect it to a standard comparable to POPIA.

cookies Karen prefers rusks

justpick sets no tracking or advertising cookies. The only things we store on your device are the recent-picks list above, two random visit IDs used only for the anonymous stats above (ours and Bascorp HQ's), and, while you're in a group room, that room's pass (gone when you close the tab).

your rights yes, you have some

Under POPIA you may ask what personal information we hold about you, ask us to correct or delete it, or object to how we use it. Because we don't keep profiles, there is usually nothing to find, but ask anyway: [email protected]. We aim to reply within 30 days.

If you're not happy with our answer, you may complain to the Information Regulator (South Africa) at inforegulator.org.za.

children no first-years. ask a grown-up to pick.

justpick is not aimed at children under 18 and does not knowingly collect information about them.

changes we'll say so. right here, not by owl.

If this policy changes, the new version goes on this page with a new date at the top.