WaitBuzz Privacy Policy
Last updated: October 26, 2026
1. Introduction
ClearStack Apps ("we", "us", "our") operates the WaitBuzz mobile application and the guest pages it serves at waitbuzz.web.app. WaitBuzz runs a walk-in waitlist: guests join from a QR code, keep a page open on their phone and are alerted when the business calls them. This policy explains what is stored, where, who can see it, how long it is kept and how to delete it. It covers WaitBuzz only; the rest of ClearStack Apps is covered by our main privacy policy.
2. What WaitBuzz Stores
- The owner's account: an anonymous account is created when the app first opens. If the owner or a host adds an email address and password, they are held by Google Firebase Authentication and never seen by us.
- The business's records: the business and location names, list settings (pace, how long a called guest is held, an optional host PIN) and the parties on the list: the first name a guest typed or the host entered, party size, an optional note such as high chair, the times they joined, were called and were seated, and whether they joined by QR.
- Guest alerts: if a guest turns on alerts, their browser's push subscription (an address at the browser maker's push service, with no name or phone number in it), used only to alert that guest about their own place on the list.
- Abuse limits: a hashed, short-lived counter per connection that limits how often the join page can be used. The raw IP address is not stored.
- Purchase check: if the owner buys a plan from Google Play, the purchase token, used only to confirm the purchase with Google and to renew or end the plan.
WaitBuzz never asks guests for a phone number, sends no text messages, takes no payments and does not build a marketing list.
3. How Long It Is Kept
- Party records, including guest names, are deleted automatically 120 days after the guest joined.
- A guest's link and push subscription are deleted two days after their visit ends.
- Abuse counters expire within minutes.
4. Crash Reports and Analytics
- Firebase Crashlytics (Google LLC): crash reports, device model, operating system and app version, so we can find and fix bugs.
- Firebase Analytics (Google LLC): basic usage events such as app opens and screen views, tied to a random ID for the app on the phone. The advertising ID is not collected.
These never include guest names or list records. WaitBuzz shows no third-party ads. The free tier shows a banner for ClearStack's own website service; nothing from the list is used to choose it. Nothing is sold or shared with advertisers.
5. Guests Who Join a List
Guests do not create an account and install nothing. The guest page sets no cookies; the browser keeps only the guest's own link so they can return to it. Guest pages are marked so search engines do not index them. A guest can leave the list at any time from their page.
6. Where It Is Stored
On Google Cloud (Firebase) in the United States, encrypted in transit and at rest. The app keeps a local copy on the host's phone so the list keeps working through a short signal drop.
7. Who Can See It
- The owner, and on Pro up to four hosts the owner invites, see the business's list and stats.
- A guest sees only their own position and estimate. The TV board shows first names and an initial for the people waiting or called.
- We do not read businesses' lists. Google acts as our processor to store them.
8. Deleting Data
In the app: Settings, then Account and recovery, then Delete account, and confirm. Or email support@clearstackapps.com from the address on the account. When the owner deletes the account, every location, party record, guest link, push subscription and join link of the business is deleted, and its QR codes stop working. A host who deletes their account leaves the business. More detail is on the account deletion page.
Crash reports are kept by Firebase for 90 days and then deleted.
9. Your Copy of the Data
In Settings, Export all records (JSON) saves a copy of every party on every plan. On Pro, Stats also exports a CSV.