Privacy Policy

Information you send us. When you use our contact, reservation, or catering forms, we receive what you type — usually your name, phone number, email, and your message. We only get what you choose to send.

Anonymous visit statistics. We use a privacy-friendly analytics tool (Umami) to count visits — things like which pages are viewed, device type, and general region. It uses no cookies, does not identify you personally, and does not follow you across other websites.

Reservation records. When you book online, we store your name, phone number, email (if you give one), party size, date and time, table assignment, and any note or occasion you add. This is held in our reservations database, run for us by Supabase.

Your cancel link. The confirmation email includes a link that lets you view or cancel your own reservation. That link carries a one-time code; we store only a one-way cryptographic hash of it, not the code itself, so we can confirm a cancellation request without keeping anything that could be used to recreate your link.

Staff sign-in. Our host staff sign in to the reservation system with a 6-digit code sent to their work email. We store a one-way hash of that code and a record of the resulting session — not the plain code.

Activity trail. We keep an internal record of actions taken on a reservation — created, seated, cancelled, marked no-show — including who or what took the action and when, for accountability and troubleshooting. This trail does not include any guest information beyond what's already in the reservation record.

Abuse prevention. To stop automated abuse of the reservation form, our booking system briefly records the IP address making each request, used only to enforce a short-term rate limit. It is not attached to your reservation record.

• We never sell your information.
• We don’t use advertising trackers or ad-network cookies.
• We don’t send spam. You’ll only hear from us about your own request.

We use what you send us to respond to your questions, handle your requests (reservations, catering, quotes), and improve this website. That’s it.

Like most websites, we rely on trusted service providers, and they process information only as needed to provide their service to us: Cloudflare hosts the site and handles its network traffic, Supabase hosts our reservations database, and Resend delivers the emails this site sends (like your reservation confirmation).

We keep messages you send us, and reservation records from our booking system, for as long as needed to serve you — as an operational record of your visit. We don't currently run an automatic deletion schedule, so that information stays in our system until we act on a deletion request or do a manual cleanup; we're not promising a fixed retention window today. Cancel-link and staff sign-in codes are stored only as one-way hashes, which cannot be reversed back into the original code. Rate-limit IP records are short-lived and used only to enforce a request window measured in minutes. You can ask us to delete your reservation history at any time — see “Your choices” below.

This website uses a secure (HTTPS) connection, and access to your information is limited to the people who need it to help you.

This website is not directed at children under 13, and we don’t knowingly collect their information.

Want to know what information we have about you, correct it, or have it deleted? Just contact us using the details below and we’ll take care of it.

If we change this policy, we’ll post the update on this page with a new date at the top.

Aguazul Seafood Restaurant + Bar
2831 NW Loop 410, San Antonio, TX 78230
(210) 809-4466 · aguazul.satx@gmail.com