Built for kitchens where mistakes are expensive.

You stay in charge

Every publish snapshots the full menu. Professional accounts keep the last 10 revisions; Ultimate keeps the last 30. Preview any past version and one click restore. No rebuilding from memory.

When you open a menu a teammate is already editing, you see their name and when they started. You can request a hand-off in one click; locks release automatically when a tab closes or goes idle.

Unpublishing a menu requires an explicit confirmation that warns you any live embeds and QR codes will stop working. Leaving the editor with unsaved edits triggers a navigation guard that asks before discarding work.

Roles & access

Two roles: Admin (full access including settings, billing, and team management) and Staff (menu design access without billing or user management). Email invitations with secure one click onboarding links. Invitees see all pending invitations in a single "My Invitations" view and can accept or decline from one screen.

Users cannot accidentally disable or remove themselves or the account creator. Roles can be updated as responsibilities shift.

Resilience

• Offline detection. The app shows a clear banner when your connection drops instead of silently failing.
• Automatic retry. Menu Author keeps trying to reach the server in the background and recovers as soon as your connection does.
• Browser vs. server outages are distinguished, so you always know whether it's your Wi-Fi or ours.
• Contained errors. If a single element runs into trouble, the editor contains the issue rather than dropping you out of your work.
• Actionable notifications. Non-critical alerts can be dismissed individually or cleared all at once so a busy session doesn't pile up.

Your data is safe

There are no passwords at all: you sign in with Google or a secure link sent to your email, so there is nothing to steal or forget. Your data is encrypted both while it travels and while it's stored. Published menus are cleaned so they're safe to open on any device, and sensitive actions are limited to admins. Sign-up and sign-in are protected against bots.

Billing runs through Stripe, so we never store your full card details. Your menus are backed up automatically, and your uploaded images are stored with redundancy so they don't get lost.

Want the specifics (encryption, signed uploads, hosting, certifications)? They're on the Under the Hood page.

Privacy on published menus

Published menu pages do not set advertising or cross-site tracking cookies on your guests. Analytics are anonymized counts, broken down by source (QR scan, web link, embed, signage) and not tied to individual visitors.

Accessible to every guest

Published menus are real text with proper headings, a keyboard-friendly filter and language bar, and full names behind every dietary and allergen code, built to WCAG 2.1 AA and checked by an automated accessibility scan on every release. What Menu Author covers, what depends on your colors, and the known limits are all spelled out in the accessibility statement.

Reporting a vulnerability

If you've found a security issue, please report it via the contact form with topic set to "Security report." We acknowledge reports within one business day and will keep you informed as we investigate.