1. Information We Collect

We collect information to help you locate and rank the heftiest, most delicious burritos in your region. The categories of information we collect include:

• Personal Identifiers: Your display name, email address, profile biography, and custom avatar image provided during account registration.
• Commercial Burrito Metrics: Burrito weight, price, custom comment reviews, taste ratings, scale pictures, and purchase locations.
• Geolocation Data: The precise geographical coordinates of the taquerias you review to correctly position them on our interactive map.
• Analytical Inferences: Derived analysis based on your submission speed, rating frequency, and weight logs (e.g., predicting the likelihood of you experiencing a food coma).

2. Legal Basis for Processing (GDPR)

If you are a resident of the European Union, the United Kingdom, or the sovereign state of Jalisco, we process your information under the following legal bases:

• Legitimate Interest: Calculating the price-per-pound ratio of local street food is a legitimate interest to combat shrinkflation and protect the public.
• Consent: You explicitly consent to us uploading photos of half-eaten burritos to our public feed.

3. How We Share & Trade Your Data

We maintain a strict policy against selling your personal contact details to third-party telemarketers or hamburger chains. However, we reserve the right to share data under these conditions:

4. Cookies & Local Storage

We utilize cookies and web storage tokens to keep you authenticated and to maintain custom interface selections. Specifically, we store:

• Your active authentication state (so you do not have to sign in every time you buy a burrito).
• Your preference for **Salsa Verde** vs. **Salsa Roja** (stored locally to adjust border colors accordingly).
• Your last map viewport coordinates so you don't load into a desert.

5. Your GBDPR Rights

Under the **General Burrito Data Protection Regulation (GBDPR)**, you have the following rights regarding your data:

• The Right to Access: Request copies of all logged burrito weights and reviews associated with your email.
• The Right to Rectification: Request changes to your logged weights if you discover your kitchen scale was poorly calibrated or you forgot to subtract the foil.
• The Right to Erasure: Request that we delete all your historical logs. Note: doing so will forfeit all your leaderboard XP and demote you to "Taco Novice" on the Burrito Council.

6. California Corn Product Act (CCPA)

For users residing in California, the California Corn Product Act (CCPA) provides you with the right to opt-out of the "sale or sharing" of your burrito metrics. If you do not want your average weight rankings traded for salsa, please toggle your settings to "Dry Burrito Mode".

7. Children's Onion & Pepper Protection Act (COPPA)

8. Data Security & Virtual Guardians

We protect your credentials using modern hashing algorithms (like PBKDF2/bcrypt) via Firebase Authentication. While we employ industry-standard cloud security, no internet transmission is 100% bulletproof. We store our backup database in a temperature-controlled server vault protected by a virtual security squad of guard Chihuahuas.

9. Contact Information

If you have any questions, concerns, or wish to report a scale drift anomaly, please contact our Burrito Data Protection Officer at:

WeighMyBurrito Corp.
Attn: Burrito Data Protection Officer
Apartado Postal 42, Zona Centro
Cabo San Lucas, B.C.S., Mexico
Email: privacy@weighmyburrito.com