Cookie policy
Last updated October 2026.
Cookies are small files a website stores on your device, either for the length of a visit or for longer. We keep them to a minimum. Page-view counts use Plausible, which sets no cookies at all. Anything that records you, analytics, session replay, heatmaps, and the affiliate referral cookie, stays off until you accept it, and you can change your mind any time.
How consent works
When you first visit, we ask once. Choosing “Reject all” stores nothing beyond the choice itself; “Accept all” turns on the analytics and attribution cookies below; and “Preferences” lets you pick. Every option is equally prominent, and declining is one click, the same as accepting.
We remember your choice for a year, then ask again.
The banner stays out of your dashboard and out of the pages a guest uses on a shared screen, such as your menu and the menu board, so nothing tracks anyone there. It shows on the pages you read on your own, where the choice matters.
We also keep a short record of each choice so we can show consent was properly given: what you chose, when, the policy version, and a shortened IP address with the part that could single out your device removed. The record is tied to a random id in your browser, not to your name, and we ask again if this policy changes in a way that matters.
Cookies we use
| Cookie | Purpose | Duration | Needs consent? |
|---|---|---|---|
qrders_consent, qrders_consent_token, qrders_consent_v Strictly necessary | Remembers your cookie choice, a random reference id for it, and the policy version, so we don't ask again and can show the choice was made. | 1 year | No (needed to run the site) |
qrders_lang Strictly necessary | Remembers the language you chose, so the site opens in it next time instead of guessing again from your browser. | 1 year | No (needed to run the site) |
qr_display_country Strictly necessary | Remembers the country you picked, so prices and the language list stay as you chose them. | 30 days | No (needed to run the site) |
Supabase auth (sb-*) Strictly necessary | Keeps you logged in to your dashboard or affiliate account. | Session (refreshed each login) | No (needed to run the site) |
qrders_ref Marketing / attribution | Remembers which affiliate referred you so they get credit. | 30 days | Yes |
PostHog (ph_*) Analytics | Product analytics, session replay and heatmaps so we can improve the product. | Up to 12 months | Yes |
Sentry Error monitoring | Sends a crash report with the page and the error so we can fix it. No session replay and no cookie. | Not stored on your device | No (error reports only) |
PostHog and Sentry are third-party services with their own privacy policies (posthog.com/privacy, sentry.io/privacy). Plausible sets no cookies and stores nothing on your device.
Controlling cookies in your browser
Beyond our banner, every browser lets you block or delete cookies in its settings. Blocking the strictly-necessary ones will stop you logging in or break parts of the site; blocking the optional ones is the same as declining here. Guides for the major browsers are linked from aboutcookies.org.
Changing your mind
Use the button (or the cookie button in the corner of any page) to reopen the banner and accept or withdraw consent whenever you like.
Changes and more
We'll update this page if our cookies change, and update the date above when we do. How we handle the rest of your data is in our privacy policy.
Related: Terms of Service, Refunds and cancellations.
Adapted from Automattic's open-source legalmattic templates (CC BY-SA 4.0) and UK ICO cookie guidance. As an adaptation, this page is likewise made available under CC BY-SA 4.0.