Privacy policy

Last updated October 19, 2026

Papi's Birria runs this website to tell you where the restaurant is and what we serve. We built it to collect as little as possible: no accounts, no forms, no analytics, no advertising pixels, no chat widgets, and no session recording. The fonts and scripts that make the page work are served from this site, not from a third party.

Who we are

Papi's Birria, 2720 E Plaza Blvd, National City, CA 91950. For anything about this policy or your information, message us on Instagram at @papisbirria.

What this site collects

Nothing that identifies you. The site has no sign-up, no newsletter, no comments, and no checkout. We do not use Google Analytics or any other analytics service, and we do not place advertising or social media tracking pixels.

Cookies and browser storage

We set no tracking cookies. The site keeps two small notes in your own browser, and neither is sent to us or to anyone else:

• Intro flag. Remembers that the opening animation has played, so it does not replay on every page load. Stored in session storage and deleted when you close the tab.
• Privacy choice. Remembers whether you accepted or declined third-party embeds. Stored in local storage for up to one year. You can change it any time with the "Privacy choices" link in the footer.

Third parties that may receive your IP address

When your browser loads something from another company, that company receives your IP address and basic browser information in order to deliver it. Everything on this site, including its fonts and the script that runs the opening animation, is served from our own address, so a normal visit involves only two companies:

• Cloudflare, which hosts the site and protects it from attacks. Cloudflare processes connection data such as IP addresses to deliver pages and may keep short-term logs for security. See Cloudflare's privacy policy.
• Google Maps (the map in the Visit section), and only if you let it load. It loads after you choose "Accept" in the privacy banner or click "Show map". When it loads, Google may set its own cookies. See Google's privacy policy. The "Google Maps" and "Apple Maps" buttons are plain links and load nothing until you click them.

Links to Instagram, TikTok, Google Maps and Apple Maps take you to those services, where their own policies apply.

No sale or sharing of personal information

We do not sell personal information, and we do not share it for cross-context behavioral advertising, as those terms are defined in the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA). We do not use your information for targeted advertising at all. The "Do Not Sell or Share My Personal Information" link in the footer opens your privacy choices, where you can keep third-party embeds switched off.

Global Privacy Control

If your browser sends a Global Privacy Control (GPC) signal, we treat it as a request to opt out: third-party embeds stay off unless you turn them on yourself, and the privacy banner does not ask you again.

Your California privacy rights

If you live in California, you have the right to:

• know what personal information a business collects about you, how it is used, and whether it is sold or shared;
• ask for that information to be deleted or corrected;
• opt out of the sale or sharing of personal information;
• limit the use of sensitive personal information;
• not be treated differently for exercising these rights.

Because this website does not collect personal information, there is normally nothing for us to look up, correct or delete. You can still make a request by messaging @papisbirria, and an authorized agent may make one for you. We will answer within 45 days.

No recording of your visit

We do not use session replay tools, keystroke or mouse tracking, website chat services, or tracking pixels that record how you interact with this site. The California Invasion of Privacy Act (CIPA) concerns about intercepted communications do not apply here, because nothing on this site intercepts or records communications.

Children

This site is not directed to children under 16, and we do not knowingly collect information from them.

Changes

If we add a tool that changes any of the above, for example analytics or online ordering, we will update this page and the date at the top before it goes live.