Is QR ordering private? What a restaurant ordering page knows about guests

It depends on the system. Some QR ordering asks guests for a name, a phone number, an account or a follow on a social app before they can order; some asks for nothing at all. WaiterPilot asks guests for no sign-up, and no name, phone number or email. It is not anonymous, though: an essential cookie keeps the phone connected to its table, and each table’s chat and orders are kept so staff can serve it. Guest data is never sold.

This guide explains what an ordering page can know about a guest, why “no sign-up” and “anonymous” are not the same thing, and the questions to ask any vendor. Our own answers are in the same table, including the ones we haven’t published yet.

What can a QR ordering page know about a guest?

Short answer: anything the guest types or is asked for, plus whatever the page stores on the phone.

An ordering page is a web page like any other. What it learns depends on how it was built and what the restaurant turned on. These are the usual places guest data comes from:

Not every row is bad. A loyalty programme needs contact details, and some restaurants want exactly that. The point is to know which rows apply before you put a QR code in front of your guests.

Why do guests worry about QR ordering and privacy?

Short answer: because some ordering pages have asked for more than an order needs.

Our keyword research in October 2026 found the worry in guests’ own searches. On Baidu, the suggestions for scan-to-order (扫码点餐) include 扫码点餐会泄露隐私吗, “does scan-to-order leak my privacy?”. In Japan, Google suggestions for QR-code ordering include 個人情報 (personal data), やめてほしい (“please stop”) and めんどくさい (“annoying”), and our keyword research found Japanese guests object to ordering pages that make them add the restaurant on LINE first.

Comfort with QR codes in general is mixed too. A 2023 William Blair survey reported that over 45% of US consumers weren’t comfortable using QR codes on their phones to view menus, order and pay (Restaurant Dive, 2023). That survey didn’t ask why, so don’t read it as a privacy finding. It is a reminder that a printed menu and a server should stay available.

What does WaiterPilot know about a guest?

Short answer: what the guest orders and writes at that table, and a cookie that keeps their phone connected to it. Not who they are.

Here is the full picture, as of October 2026:

We keep each table’s chat and orders so your staff can serve the table and you can see your results, never to build profiles of guests.

Is “no sign-up” the same as anonymous?

Short answer: no. That is why we never call WaiterPilot anonymous.

“Anonymous” would mean nothing can be tied to a person. Two things in any chat-based ordering page make that untrue:

1. A cookie identifies the phone at its table. That is how a guest’s second round lands on the same table and the same bill. It doesn’t say who the guest is, but it does tell one phone from another.
2. The guest can type anything. A guest who writes “this is Maria, table for the birthday” has put her name in the chat, and staff can read it. A valet call can carry a car plate. Notes go on the kitchen ticket as the request was taken.

The accurate phrase is: guests don’t sign up and aren’t asked who they are. That is a real privacy benefit, and it is enough without overstating it.

One practical consequence: tell your staff not to ask guests to type personal details into the chat. And for allergies, the chat gives what your menu says and asks the guest to confirm with staff; your team always has the final word. The allergies and dietary questions page explains that flow.

What questions should you ask any QR ordering vendor?

Short answer: these twelve. Our answers are in the right-hand column, including the ones we can’t give yet.

The last four rows are the honest part. As of October 2026 we have not published a retention period, an export or deletion process, a data processing agreement or security certifications. We’d rather tell you that here than have you discover it in a contract. The full list of questions for choosing a vendor, privacy and everything else, is in the buyer’s checklist.

We also don’t claim compliance with any particular privacy law in this post. Rules differ by country, and whether a set-up meets them is a question for your own adviser.

When is a privacy-light system the wrong choice?

Short answer: when you want to know who your guests are.

Collecting nothing about guests is a trade-off. If you want to build a guest email list, run a loyalty programme or invite guests back by text, WaiterPilot won’t do it, because it doesn’t ask for contact details.

Other products are built for that. For example, sunday’s site lists “60% of guest emails captured” among its results (a vendor claim, as published on 15 October 2026; sunday). Toast’s Mobile Order & Pay FAQ says standard tabs start with the guest’s name (Toast, 2026). Neither is wrong; they solve a different problem. If guest marketing matters more to you than a sign-up-free page, one of those is the better fit.

What should you tell your guests?

Short answer: one plain sentence next to the QR code, and a printed menu for anyone who would rather not scan.

Casa Olivo is a fictional restaurant we use for examples (an example, not a customer).

Casa Olivo prints this under the QR code on each table card:

Scan to order, and chat in your own language. No app, no sign-up, no phone number. We keep your table’s order and chat so our staff can serve you, and we never sell it. Prefer paper? Ask your server.

Each claim on that card is one WaiterPilot actually supports. If you use another vendor, change the sentence to match what it really does, and don’t print “anonymous” unless you have checked it. Then make three habits part of service:

1. Keep the printed menu on every table, so scanning is a choice.
2. Train servers to answer “what do you keep?” in one sentence.
3. Ask guests with allergies to tell a server as well; staff have the final say.

What to do next

Read our privacy and data page for the full list of what WaiterPilot keeps and the service providers that help run it, then put the twelve questions above to every vendor you’re considering. To see the guest side for yourself, try a sample order: it’s a simulation in your browser, with no real order placed and no guest data involved. New to the topic? Start with the QR table ordering page, QR menu vs QR ordering vs order-and-pay, or how an AI waiter works.