Privacy Policy

Last updated: 25 October 2026

About this website

McDonald’s Menu Prices Canada is an independent information website about McDonald’s menu items and prices in Canada. It is not owned, operated or endorsed by McDonald’s. This policy explains how information is handled when you browse this website or get in touch. It does not cover McDonald’s websites, restaurants, apps or ordering services.

You can read the menu guide without creating an account. For privacy questions or requests, use our Contact page.

Information we collect

Contact messages

The contact form asks for your full name, email address, subject and message. It sends these details to the website administrator by email. The form does not create a separate message archive in the WordPress database. Messages can still be stored in the receiving mailbox, replies and any copies kept by the email system.

Please send only what is needed to explain your question. Do not include payment card numbers, passwords, medical information or other sensitive details. You do not need to send a receipt or information about another person to suggest a menu correction.

Technical and spam-prevention information

When your browser requests a page, the server receives technical details such as your IP address, the requested page and browser information. Server error logs may include request details when something goes wrong.

The contact form uses a protected hash derived from your IP address to count sending attempts. It also uses temporary random form tokens and timing checks to reduce spam and repeated submissions. The form does not add your IP address to the email message. These checks do not use an external CAPTCHA service.

Comments on older posts

Comments remain enabled on an older WordPress post, although the current page templates do not display a comment form. If a comment is submitted through WordPress, it can store the comment, name, email address, optional website, IP address and browser details for moderation. WordPress may also email a comment notification to the site administrator. Where comments are displayed, comment text and the chosen display name can be public; the email address is not part of the normal public display.

How information is used

Contact details and messages are used to read and respond to enquiries, review reported prices or missing menu items, and handle privacy requests. Technical information is used to operate the site, investigate errors and limit abuse. Comment information is used to manage submitted comments.

Sending a message is optional. The form needs an email address so a reply is possible. It does not sign you up for a mailing list, publish your message or send it to McDonald’s. Browsing the website is not treated as permission for unrelated marketing.

Cookies and browser storage

The current menu and contact features do not set advertising or analytics cookies. The contact form’s spam-prevention records are stored on the server, rather than in tracking cookies. Menu filters and item selections run in your browser without saving a visitor profile.

WordPress can use functional cookies for administrator sign-in and saved account preferences. If you choose to save your details when submitting a WordPress comment, it can use optional cookies for your name, email address and website. WordPress also uses session storage for an emoji-support check so it can display characters correctly. This is a browser feature check, not a record of the pages you visit.

You can manage cookies and site storage in your browser settings. Blocking functional cookies may affect sign-in or saved commenting details, but no account is needed to read the menu.

Analytics and visitor tracking

The current website does not have Google Analytics, Google Tag Manager, advertising pixels, session-recording tools or another visitor analytics service implemented. It does not send menu searches or selections to an analytics service. Technical server processing and the form’s spam checks still take place as described above.

The site runs on WordPress and sends contact messages using WordPress email functionality. Services used to host the website, handle email or keep backups may process information needed to provide those services. Hosting and email arrangements also determine where those copies are stored; this policy does not promise storage only in Canada.

Fonts and menu images are served from this website. WordPress can request fallback emoji images from its WordPress.org image service if your browser needs them. In that case, the image service receives the connection details needed to serve the image.

Some pages link to external websites, including McDonald’s official websites. Following a link takes you to a service with its own privacy policy. That service may receive technical information from your browser and collect information you give it. A link does not send the contents of your contact message to that service.

Storage, security and retention

The contact form validates and cleans submitted fields, checks that the form is valid and limits repeated sending attempts. These measures help protect the form, but no website or email system can guarantee complete security.

The temporary spam-prevention records have the following expiry settings:

  • Sending-attempt records: 10 minutes after the latest recorded attempt.
  • Used form tokens: 24 hours.
  • Successful-send confirmation records: 5 minutes.

Expired records stop being used, but may remain in the database until WordPress removes them during cleanup. These expiry settings do not delete email messages.

The contact form does not set an automatic deletion schedule for mailbox messages, replies, server logs or backups. WordPress also has no automatic deletion schedule for ordinary comments in the current setup. Those records may remain until removed through the relevant system. A fixed retention period for these records has not been established in this policy. Please use the Contact page to ask about information held about you or to request deletion.

When information may be shared

The contact form sends your details to the website administrator and the email systems needed to handle the message. Hosting or technical service providers may handle information while operating or maintaining the site. Information may also need to be disclosed where the law requires it or permits it to address misuse or protect legal rights.

The current website has no feature that sells personal information or shares contact messages for behavioural advertising. Contact submissions are not automatically sent to McDonald’s, analytics providers or advertisers. Public comments are handled as explained above.

Your privacy choices and requests

You can ask what personal information is held about you, how it has been used or shared, and request access or correction. You can also request deletion or withdraw permission for further use, subject to any legal limits or records that must be kept. Withdrawing permission does not undo processing that has already taken place.

Send your request through the Contact page with a subject such as “Privacy request”. Provide enough information to locate your message or comment. Your identity may need to be checked before private information is released. Please do not send identification documents through the form unless a suitable verification method has been agreed.

Requests will be considered under the Canadian privacy law that applies to the circumstances, including any required response time and permitted exceptions. You can also raise a concern with the Office of the Privacy Commissioner of Canada or the relevant provincial privacy regulator.

Children’s privacy

This is a general menu information guide. Its contact form is not intended to collect children’s personal information. Children should ask a parent or guardian to contact us on their behalf rather than send personal details themselves. If you believe a child has submitted personal information, use the Contact page to ask for it to be reviewed and removed where appropriate.

Changes to this policy

This policy may be updated when the website or its information-handling practices change. The date at the top shows the latest revision. If a proposed new use of information requires your consent under applicable law, an update to this page alone does not replace that consent.

Contact about privacy

For questions about this policy, information storage or a privacy request, contact the website administrator through our Contact page. This is the privacy contact for this independent website. For information you gave directly to McDonald’s or a delivery service, contact that service instead.