Privacy
Quilo is a static site. There is no account, no backend, and no advertising.
- Browser storage. EN, PT or ES is saved in your browser's
localStorageasquilo-langso the chrome stays in that language on the next visit. If you open a real curated host pack, its public slug is saved insessionStoragefor that tab and cleared when the tab session ends. Quilo checks the slug against its curated host list before using it; example and unknown slugs are ignored. Calculator inputs and selected controls are kept in the current browser history entry so they can be restored when you go back. They stay on your device and are not included in analytics. - Visitor counts. Vercel Web Analytics records page views, referrer, country and device type so we know which pages are worth writing. It sets no cookies, needs no API key, is served from this domain rather than a third-party CDN, and does not identify you or follow you to other sites.
- Product events. Through the same cookieless pipeline, Quilo counts a handful of anonymous events: the calculator produced a result, the phrase page was opened from the calculator, a phrase card was copied, the bill checker reached a verdict, the board photo reader ran (only which path it took and whether this browser can read text on-device — never the photo), and a curated host pack was opened (which pack, never who). For a visitor who came through a real curated host pack in the same tab session, the host's public slug is also attached to calculator completion, opening the phrases from the calculator and phrase-copy events. The events never carry prices, weights or amounts you typed, anything from a photo, or personal contact details.
- Board photos. The photo reader on the calculator works entirely on your device: the photo is drawn into the page, read by your own browser where it can do that, and never uploaded, stored or sent anywhere. The site's security policy has no server it could send a photo to.
- Email. The dining pack page and the week pack page can show an email form. Both are currently switched off: the forms are hidden and nothing you could type there is sent or stored. If either is switched on, the address will go to Formspree — the only outside service this site's security policy lets it talk to — solely for that one email, and this page will be updated first.
- WhatsApp. The WhatsApp page describes a flow that is not connected: no number is wired up and the page cannot open a chat. If it ever goes live, messages you choose to send go to WhatsApp — Meta's platform, under its own privacy terms — and this page will say so first.
- Affiliate links. Guide pages can carry a clearly marked “Useful for your trip” block with affiliate links to outside services. They are plain links: no partner scripts or pixels run on Quilo, and a partner learns nothing about you unless you click through. Quilo may earn a commission at no extra cost to you, and partners never influence what the guides say.
- Paid extras. Everything a traveller uses on Quilo is free. Optional extras — such as a personalised one-pager for hosts — are sold through a payment provider's own hosted page: Quilo links out, the provider handles the payment, and no card details, orders or accounts ever touch this site.
- Nothing else third-party. No tracking pixels, no ads, no fonts loaded from a CDN. Body type is the device system font (San Francisco on Apple, Segoe on Windows). Numbers use IBM Plex Mono, served from this domain.
- Offline cache. After the first visit, a service worker may keep pages and scripts on your device so the calculator works at a table with no signal. You can clear it from the browser's site settings.
- Prices. You type the restaurant's own €/kg. Quilo never fetches market prices and never sends what you typed anywhere.