Privacy policy
The short version: we do not ask you to create an account, we take no payment on this site, and the things you save while browsing stay in your own browser. The only personal information we hold is what you send us — a WhatsApp message, or a review.
Who is responsible
SweetBites by Hiba, a home bakery in Zgharta, North Lebanon, decides how the information described here is used.
What we do not do
We do not ask you to register, and there are no passwords or customer accounts on this site.
We never handle card or bank details, because no payment happens here.
We do not use advertising cookies, we do not track you between websites, and we do not sell or share information about you with anyone for marketing.
Your favourites and your order list
Both are stored by your own browser, on your own device, using local storage. They are never sent to us and we cannot see them.
Clearing your browser's site data removes them, and using a different device or browser means starting again. That is the trade for not asking you to sign in.
Ordering on WhatsApp
Sending an order opens a WhatsApp conversation with us. That conversation is carried by WhatsApp, under WhatsApp's own privacy policy, not ours.
We keep the messages about an order for as long as we need them to make and deliver it, and to sort out anything that goes wrong afterwards.
The message your browser prepares contains the items and options you chose. It never contains a price or a total — we confirm those with you directly.
If you leave a review
We store the name you type, your rating, your words, and the date.
We also store a one-way keyed fingerprint of your internet address. It is not the address itself and it cannot be turned back into one; it exists so that the same person cannot flood the form. Nobody, including us, can read an address out of it.
Reviews are checked by a person before they appear. When one is published, the site shows your first name only.
If you would like a review removed, message us on WhatsApp and we will take it down.
The spam check on the review form
The review form uses Cloudflare Turnstile to tell people from scripts. When it runs, Cloudflare receives technical information about your request in order to answer that question. Cloudflare states that it does not use it to build a profile of you across sites.
Turnstile appears on the review form and nowhere else on this site.
Hosting, and where your data goes
This site runs on Cloudflare — Workers for the pages, D1 for the database, R2 for the photographs. Cloudflare processes requests to the site on our behalf and keeps short-lived operational and security records, which is how a website is defended from attacks.
Cloudflare operates worldwide, so a request may be handled outside Lebanon.
How long we keep things
Published reviews stay until you or we remove them. Reviews we do not publish are removed from the queue once they have been dealt with.
Still being finalised: exactly how long unpublished reviews and WhatsApp order conversations are kept before they are deleted.
What you can ask us for
Message us on WhatsApp to ask what we hold about you, to correct it, or to have it deleted. We will do it, and we will not ask you to fill in a form.
Still being finalised: the rights that apply under Lebanese law, and the timescale we commit to for answering.
Children
This site is not aimed at children, and we do not knowingly collect anything about them. Please do not send us a review if you are under 16.
Changes
If this policy changes we will update this page. The version you are reading is the one that applies.
Contact
WhatsApp is the fastest way to reach us, for a privacy question as much as for an order.