Cookies & Terms

Remember what you have already been shown — this notice, the terms mention — and carry a one-off message from one page to the next. Erased as soon as they have served.

Your basket, so it survives a refresh. Never leaves the device.

For this tab only: the restaurant and mode (takeaway / dine-in) chosen for your order; your menu filters (diet, allergens to avoid, search, scroll position) so they are still there when you come back from the basket; and two technical markers — the map has already asked for your location, and the time of an automatic reload after a site update, so it never reloads in a loop. Nothing is sent.

The contact details typed for your order — name, email, phone, prefilled from your account if you are signed in — so you do not retype them if you go back to the menu before ordering. They stay in this tab and are erased as soon as the order is placed, or when you sign out.

The order you have just placed, as the restaurant recorded it (dishes, total, progress, and the table or notes you typed), so the confirmation page shows it at once and follows the kitchen. No contact details. It stays in this tab and is erased when you sign out.

Only while you sign in with Google or Apple: an encrypted, single-use token that ties Google’s or Apple’s answer to this browser, so a sign-in cannot be forced on you from another site; erased as soon as you are back.

Your language, light/dark theme and accent colour — drawn at random on your first visit, then kept — and your display settings (side menu, compact mode, guided tours).

Which guided tours you have seen, so they do not replay.

Present only if you refuse audience measurement below: it tells the site to send nothing. Kept twice — in the browser, and as a cookie set by our servers that Safari does not erase after 7 days — and it holds only “1”. Not an identifier. “Erase everything” keeps it, so measurement is never switched back on behind your back.

Your last 5 searches in the site’s search, so you can run them again in one tap. They stay on the device; “Erase everything” removes them.

Two small choices: when you closed the invitation to install the iPhone app (so it stays away for 30 days), and the AI model you picked for the menu guide at the table.

The restaurant whose menu you are reading — chosen by you, by a table’s QR code, or the nearest one if you allowed location (only its name is kept, never your position) — and the fact that you have already been offered a language switch.

How you last signed in — Google, Apple or email — and your masked address (p•••@gmail.com), so the right button is waiting when you come back. No name and no token: it signs nobody in. Kept after you sign out; “Not you?” in the sign-in window, or “Erase everything”, removes it.

The dishes you favourite without an account. They stay on the device; if you sign in, they move to your account and are erased from here.

A random identifier, created the first time you vote on, rate or report a review without an account: it prevents duplicates and shows you your own votes. It is sent only with those actions; for votes and reports our servers keep only an encrypted fingerprint of it, and it is stored with a review you post. It does not say who you are.

For the BAI assistant, only if you use it: a random identifier, created the first time something is saved to History, that alone unlocks this device’s History (kept 7 days on our servers); the id of the current conversation; and that conversation’s text (last 60 messages, without photos), so it follows you from page to page.

Your session, if you sign in. Encrypted, httpOnly — unreadable by page scripts.

A copy of your profile — name, email, picture, sign-up date, favourites, newsletter subscription, last sign-in date and count — so the header shows the right button without a round trip. Grants nothing.

Set only when you open a sign-in link received by email: it ties that link to the “Sign in” button on the confirmation page, so a link opened by mistake signs nobody in. Encrypted, httpOnly, deleted as soon as it has served.

For this tab, during a sign-in or sign-out: two technical flags that reopen the sign-in window or finish a sign-out cleanly. No identifier.

Restaurant staff only: the team-area access token, a marker that this browser belongs to a team member, the restaurant you are working on, and this device’s settings for the online-orders screen (sound, ringing, vibration, screen kept on, notifications, suggested preparation time, large text).