Privacy Policy
Effective date: February 14, 2026
Introduction
Mandalay Morning Star Burmese Kitchen ("we," "our," or "us") operates a weekly meal delivery subscription service and the website at mandalaymorningstar.com. This Privacy Policy explains how we collect, use, and protect your personal information when you use our service. We believe in being transparent about our data practices—if you have questions, please reach out to us anytime.
Information We Collect
We collect the following types of information to provide and improve our service:
- Account information: Your name, email address, and profile photo, provided through Google OAuth sign-in.
- Order data: Delivery address, order history, and any dietary preferences you share with us.
- Payment information: Payment card details are processed directly by Stripe. We do not store your card numbers on our servers.
- Device and usage data: Browser type, IP address, pages visited, and referring URL, collected automatically when you use our website.
How We Use Your Information
We use your information to:
- Fulfill and deliver your orders, including communicating delivery updates.
- Send transactional emails such as order confirmations and status notifications.
- Improve our service based on how customers use the website and what they order.
- Diagnose errors and monitor performance to keep the site running smoothly.
Third-Party Service Providers
We work with trusted third-party services to operate our business. Here is exactly who has access to your data and why:
Google (OAuth)
We use Google Sign-In for account authentication. When you sign in with Google, we receive your name, email address, and profile photo. We request only standard scopes: openid, email, and profile. We do not access your contacts, calendar, or any other Google data.
Stripe
Stripe processes all payments. Your payment card details are sent directly to Stripe and never touch our servers. For more information, see Stripe's privacy policy.
Resend
We use Resend to deliver transactional emails, including order confirmations and status updates. Resend processes your email address solely for the purpose of email delivery.
Sentry
We use Sentry for error monitoring and performance tracking. When errors occur, Sentry may capture anonymized session recordings to help us diagnose issues. All text, form inputs, and media are masked in these recordings (maskAllText, maskAllInputs, blockAllMedia). Session recordings are only captured when errors occur (replaysOnErrorSampleRate: 1.0, replaysSessionSampleRate: 0). Sentry also collects browser breadcrumbs—including console messages, DOM interactions, and network requests—to provide context for error reports.
Vercel
Our website is hosted on Vercel. We use Vercel Analytics to understand site usage patterns and Vercel Speed Insights to monitor loading performance. Speed Insights operates at a 50% sample rate. These tools collect anonymized usage and performance data.
Data Sharing
We share personal information only with the service providers listed above, and only to the extent necessary to operate our service. We do not sell, rent, or trade your personal information to third parties.
Data Retention
We retain your account data for as long as your account is active. Order history is retained for our business records. You may request deletion of your personal information at any time by contacting us at the email address below.
Cookies and Similar Technologies
Our website uses cookies and similar technologies for the following purposes:
- Authentication: Session cookies to keep you signed in.
- Analytics: Vercel Analytics cookies to understand how visitors use our site.
- Error monitoring: Sentry cookies to associate error reports with browsing sessions.
Your Rights
You have the right to access, correct, or delete your personal information. If you would like to exercise any of these rights, please contact us at the email address below. We will respond to your request in a timely manner.
California Residents
California residents may have additional rights under state law. If you are a California resident and would like more information about your rights, please contact us at the email address below.
Children's Privacy
Our service is not directed at children under 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected data from a child under 13, we will take steps to delete it promptly.
Changes to This Policy
We may update this Privacy Policy from time to time. When we make changes, we will post the updated policy on this page with a new effective date. We encourage you to review this page periodically.
Contact Us
If you have any questions about this Privacy Policy or our data practices, we'd love to hear from you:
- Email: admin@mandalaymorningstar.com
- Address: 750 Terrado Plaza, Suite 33, Covina, CA 91723