Privacy Policy

Effective August 25, 2026

Short version: we do not sell anything about you and there are no accounts. If you pay by card, the card details are typed into the payment company’s own form and never reach this site. Here is everything we actually collect, and everyone who sees any of it.

What you give us

There is no account and no password on this site, so nothing here is tied to a profile. What we keep depends on what you do.

If you join the smash list, we keep the mobile number you type in, the exact wording of the consent you agreed to, and the date. That is the whole record.

If you place an order, we keep your name, your mobile number, and what you ordered. If you type them, we also keep your email address so we can send the receipt, and your delivery address so we can bring it to you. A pickup order keeps no address at all.

If you write to us about catering, about a franchise, or through the suggestion box, we keep what you typed and the phone number or email you left, so we can reply.

Four things, and they all stay on your device

We keep your answer to this notice, so we stop asking. We keep whether you have already seen the smash-list card, for the same reason. We keep whatever is in your cart, so it is still there if you come back. And while you are in the middle of an order, we keep what you have typed in the checkout so a reload does not lose it; that one lives only in this tab, is only brought back within 30 minutes, and is deleted the moment your order goes through or the tab closes. That is the entire list, and none of it is a cookie — it is browser storage, it stays on your device, and we never send it anywhere. Nothing is sold, and nothing extra is kept because you said yes. Other companies whose content appears on this page do set their own cookies in your browser; they are named below.

What we do not do

We do not sell, rent or share your mobile number, your other contact details, or your consent record with third parties or affiliates for marketing or promotional purposes. That includes the record of your smash-list opt-in, which is the number, the wording you agreed to and the date. It is kept as our proof that you asked to hear from us and it is used for nothing else.

We run no advertising trackers and no analytics of our own — there is no measurement code on this site at all, and we do not follow you to other sites. We cannot make that promise on Google’s behalf for the parts of this page that are theirs: the map on the home page and the review photos are loaded by your browser directly from Google, and Google may set its own cookies when that happens. What Google does with those is covered by Google’s Privacy Policy.

Who else sees any of this

These are the companies involved in running this site, and each one only gets the part it needs. There is no number to remember here, only the list — if it changes, this list changes with it.

  • Supabase stores what you type: the smash-list number and consent, orders, and anything you send through catering, franchise or the suggestion box.
  • Resend sends the emails — your receipt, and the copy that goes to the shop.
  • Vercel hosts the site and sees the ordinary request records any web host sees.
  • Clover takes the card. The card number, expiry date, security code, cardholder name and ZIP are typed into Clover’s own form, which appears inside this page but belongs to them. Those details go straight to Clover. They never reach this site, its servers, or the shop.
  • Google is involved in several separate ways, and they are genuinely different:
    • the map on the home page is embedded from Google, so your browser loads it straight from them;
    • the review photos come from Google — we ask Google for a link and send your browser to it, so the picture is fetched from Google’s own servers;
    • the reviews and the rating are looked up by our server asking Google. Your browser is not involved in that one, and Google learns nothing about you from it.
    • the anti-fraud check on the payment step is Google’s reCAPTCHA. It is loaded by the payment company’s own software, not by us, and it arrives only when you reach the card step — it is not on the rest of the site. It runs in your browser and sends Google information about how the page was used, to tell a person from a machine. Google’s Privacy Policy and Terms of Service apply to it.

Supabase, Resend, Vercel and Clover handle this only to run the things you asked for, and are not permitted to use it for their own purposes. Google is different and we will not pretend otherwise: where your browser loads something directly from Google, you are dealing with Google, under their privacy policy and not under ours.

The texts

The smash list is open and taking sign-ups, and no message has gone out yet. Your number and your consent are stored now so that when the texts do start we can show you asked for them.

When messaging begins it runs through a messaging provider, who may use your number only to deliver our messages and for nothing else. Reply STOP to any message to end them, or HELP for help. Message and data rates may apply. We keep a note when somebody opts out, so we do not text them again by mistake. Full details are in the SMS Terms.

Getting your number off the list

Reply STOP to a text, or call the shop and ask. Either works, and we will confirm it.

Children

This site is not aimed at children and we do not knowingly collect anything from anyone under 13.

Changes

If this policy changes, the date at the top changes with it.

Ask us

SmashTime Burger Co is a trade name of Tremont Eats, Inc.

Call the shop at (718) 795-0522 and ask for Rick or Mark.

Forgetting you on this device

This clears the four things above out of this browser: your answer to the notice, whether you have seen the smash-list card, your cart, and anything half-typed in the checkout. It takes effect immediately and the site will treat you as a first-time visitor.

It does not delete anything the shop holds — an order you placed, a message you sent, or your smash-list sign-up. For those, call the shop on (718) 795-0522 and ask for Rick or Mark, or reply STOP to a text to come off the list.