Campus Cravings Privacy Policy

A clear view of the information we use.

Last updated: 22 August 2026

This notice explains the information used by Campus Cravings to provide accounts, ordering and collection.

Information used by the service

When you create an account, we use your username and password to provide secure access. You may also provide a phone number or guest code when registering. Orders include the items selected, quantities, payment method, order status and collection code.

Why it is used

This information is used to place and manage orders, show your order history, support collection and help resolve account or order questions. Where a phone number has been provided, authorised administrators may also use it to identify repeated accounts and investigate suspected payment reversals, fraudulent payment claims or related misuse of the service.

Who can see it

Your account and order information is available to you and to authorised Campus Cravings administrators who need it to operate the service. Other customers cannot view your order history.

Your account security

We cannot see your password.

Passwords are handled by Supabase Auth and stored as secure bcrypt hashes, not readable password text. The Campus Cravings team cannot view your original password.

We intentionally do not ask for your email address, which reduces the personal information collected by this service. Because Supabase normally delivers self-service password recovery through email, automatic email password resets are not currently available with our username-only account setup.

If you optionally provide a phone number, it is kept in your Campus Cravings profile for account and order support. It is not connected to Supabase phone authentication, so it cannot currently receive an automatic recovery code. SMS recovery requires a third-party messaging provider, additional verification setup and ongoing messaging costs. As a small student-run school startup, we have not enabled that service at this stage. If you forget your password, contact the Campus Cravings team for the recovery options currently available.

Read how Supabase protects passwords

Payments

Campus Cravings displays payment contact details but does not process card payments or store mobile money PINs. Never share your PIN or password with anyone.

When a mobile money payment can be matched to a customer, an authorised administrator may link the relevant payment phone number to that customer profile. This helps reconcile payments, investigate suspected reversal or payment-claim fraud, and recognise repeated misuse. A phone number associated with a flagged profile may be placed on an internal, administrator-only watchlist and prevented from being linked to another active account. A matching number is treated as a reason for review, not automatic proof of wrongdoing, because phone numbers may be shared or reassigned. If an administrator clears a flag, a limited historical warning may remain visible to authorised administrators, but it no longer blocks the restored account or phone number.

Information saved on your device

Your browser stores your cart, appearance preferences, sign-in session and a recent copy of the public menu. The saved menu helps the page remain useful during a temporary connection problem.

Your questions

If you have a question about your account information, use the Contact page to reach the Campus Cravings team.