Cookie Policy

We use as few cookies as possible.

Essential

Refresh token cookie: keeps you signed in. httpOnly (invisible to JavaScript), and marked Secure. This is the only cookie required for the platform to function and cannot be disabled without signing out.
Device recognition cookie: a random identifier that lets us recognise a browser you have signed in from before, so we only send a "new sign-in" alert when it is genuinely a browser we haven't seen - not just because you changed networks. httpOnly and marked Secure; on our side only a one-way hash of it is stored. If you clear your cookies, your next sign-in from that browser is treated as new.

Theme preference: remembers whether you chose light, dark, or system default. Stored on your device only; never sent to us.
Shopping cart: the items in your cart are kept in your browser's local storage on your device, separately for each business, so your cart survives a page reload. Local storage isn't a cookie, but it's covered here for completeness. The cart is not sent to us until you check out.

We do not use advertising or third-party tracking cookies.