Privacy Policy.
We keep this short on purpose. ARCANA is a small, independent wine bar — we only collect what we need to run reservations, take deposits, and answer your emails. No tracking pixels, no behavioral ads, no third parties we haven't named below.
1. What we collect
When you reserve a table
- Your first and last name
- Your email address
- Your phone number
- The date, time, and party size you picked
- Any notes you leave us (allergies, occasion, seating preference)
When you pay a deposit
- Card details are entered directly into a payment field secured by Stripe. We never see, store, or log your full card number, CVC, or expiration on our servers.
- We receive only a tokenized confirmation from Stripe (last 4 digits, brand, transaction reference) for accounting.
When you visit the website
- Standard server access logs (IP address, page requested, timestamp, user-agent) retained for up to 30 days for security and debugging.
- No analytics scripts (no Google Analytics, no Meta Pixel, no Hotjar, no Mixpanel, no Plausible by default).
- No advertising cookies. No cross-site trackers.
2. Why we collect it
- Reservations — to hold your table and contact you if something changes.
- Deposits — to reduce no-shows and protect kitchen staffing.
- Newsletter — only if you opt in. One email on Fridays about what's pouring. Unsubscribe in one click, any time.
- Email replies — when you write to reservations@arcanasf.com or entertainment@arcanasf.com, we keep the thread to answer you.
3. Third parties we use
- Stripe — payment processing. Stripe's privacy policy.
- Google Fonts — typography (Fraunces, Inter, JetBrains Mono, Pinyon Script). Loaded from
fonts.googleapis.com. Your IP is visible to Google when fonts load. Google's privacy policy. - Google Maps embed — the map at the bottom of the home page is served by Google. Google may set cookies in that frame. Google's cookie policy.
- Email service — confirmation emails are sent via our transactional email provider (typically Postmark or SendGrid). Email content is transmitted over TLS.
4. How long we keep it
- Reservation records — up to 3 years from your last visit, then anonymized for aggregate stats.
- Email correspondence — up to 3 years, then archived or deleted on request.
- Payment records — 7 years (IRS / California Department of Tax and Fee Administration requirements).
- Newsletter list — until you unsubscribe.
- Server access logs — 30 days.
5. Your rights
You can write to reservations@arcanasf.com at any time to:
- See what personal information we hold about you
- Correct anything that's wrong
- Ask us to delete your information
- Opt out of marketing emails (also: one-click unsubscribe in any newsletter)
- Get a copy of your data in a readable format
California residents (CCPA / CPRA)
If you live in California, you have the right to know what personal information we collect, to request deletion, to correct inaccurate information, and to opt out of any "sale" or "sharing" of personal information. ARCANA does not sell or share personal information with third parties for advertising or cross-context behavioral purposes. To exercise any right, email reservations@arcanasf.com with subject line "Privacy Request". We respond within 45 days.
6. Security
The site runs over HTTPS only. Payment details never touch our servers — Stripe handles them end to end with PCI-DSS Level 1 compliance. Reservation data is stored in a database with encryption at rest and access limited to staff who need it.
7. Children
The site is intended for adults of legal drinking age (21+ in California). We do not knowingly collect information from anyone under 13. If you believe we have, email us and we'll delete it.
8. Changes to this policy
If we change anything material, we update the "Last updated" date at the top and announce it in the next newsletter. Past versions on request.
9. Contact
ARCANA
2512 Mission Street
San Francisco, CA 94110
+1 (415) 795-3842
reservations@arcanasf.com
Demonstration site — this policy is a template aligned to CCPA/CPRA best practice. The live ARCANA site may differ; see arcanasf.com.