Legal

Privacy Policy

Plain-language details about what Monaco's Cafe collects through this website, why we collect it, how long we keep it, and how you can contact us about your information.

Last updated May 2026

No selling

We do not sell your information or share it with advertisers or data brokers.

Minimal data

We collect only what you submit through forms, email signups, and basic security logs.

Your choice

You can ask us to update, delete, or stop using your information at any time.

Who we are

Monaco's Cafe is a coffee, brunch, and tea cafe at 139 Franklin Turnpike, Mahwah, New Jersey 07430. References to "we," "us," and "our" mean Monaco's Cafe. This policy applies to https://monacos.cafe and the forms, email signup features, maps, and links provided on it.

What we collect

We collect a limited amount of information, depending on how you use the site.

Contact form details — your name, email address, subject, message, and any event or reservation details you choose to include.
Email signup details — your email address, so we can send opening updates and occasional cafe news.
Security and server logs — IP address, browser user-agent, requested page, timestamp, and temporary rate-limit records used to prevent abuse.
Technical form fields — anti-spam tokens, honeypot fields, and timestamps used to help tell human submissions from automated spam.

We do not collect payment card details through this website. Online ordering, if used, is handled by the linked ordering provider. We do not knowingly collect information from anyone under 13.

How we use your information

To reply to questions, event inquiries, reservation requests, and other messages you send us.
To send opening updates and occasional cafe news if you choose to sign up.
To protect the website from spam, automated abuse, and malicious form submissions.
To maintain basic business records and meet legal obligations when required.

We do not sell your information. We do not share it with advertisers or data brokers.

How long we keep it

Contact form messages are kept as long as needed to handle the conversation and normal business follow-up. Email signup records are kept until you unsubscribe or ask us to remove you. Temporary rate-limit records are short-lived and used only for site protection. Server logs are kept for a limited operational period and then deleted or rotated.

Cookies and tracking

This website does not currently use advertising cookies, behavioural tracking, or third-party analytics. If we add privacy-respecting analytics later, we will update this policy before activating it.

Third-party services

The site uses or links to a small number of third-party services. Those services may receive technical information, such as your IP address, as part of normal browser requests.

Google Fonts — loads typography used by the site.
Google Maps — powers map embeds and directions links on location pages.
Font Awesome CDN — loads the icon font used throughout the site.
Instagram — opens our Instagram profile if you click an Instagram link.
Dripos ordering — opens the online ordering/menu experience if you click an order link.

When you leave our website for a third-party service, that service's privacy practices apply.

How we protect your information

We use HTTPS for website traffic. Form submissions are validated and rate-limited on the server. Email credentials and private configuration details are kept outside the public website directory and are not intended to be accessible to visitors.

Your choices

Unsubscribe — use the unsubscribe option in our emails or contact us and we will remove you.
Access or deletion — ask what information we hold about you, request corrections, or ask us to delete it where applicable.
Decline — you can browse the site without submitting a form or joining the email list.