Cookie Policy
Last Updated: September 29, 2026
What this policy covers
This policy explains what cookies and similar technologies we use, what each one is for and how you can control them. It is part of our privacy policy.
A cookie is a small file a website stores on your device. Similar technologies, such as your browser's local storage, work the same way, and we treat them the same in this policy.
Essential cookies and storage
These cookies are strictly necessary to provide the service you asked for, so they are set without consent:
- Session — keeps you signed in while you use the dashboard. Deleted when you close the browser.
- Sign-in memory — set only if you tick "remember me" when signing in, so you do not have to sign in again on your next visit. Kept for two weeks.
- Security token — protects forms against cross-site request forgery. Deleted when you close the browser.
- Consent choice — stored on your device (not a cookie): remembers whether you accepted or rejected analytics cookies, so we stop asking. Kept until you clear your browser data. If you have an account, we also save that choice, the date you made it and the version of this policy it applied to on your account, so you are not asked again on every new device and so we can show when you were asked. It is deleted with your account.
Measuring how our own service is used
When you are signed in, we store one cookie named editor_viewport on your device. It records only whether your screen is showing the wide layout or the narrow layout of the menu editor, as the single word "desktop" or "mobile". It holds no identifier, so it cannot be used to recognise you, and it is never sent to any other company. We use it to check whether a change we made to one of those two layouts actually helped the people who use it. It is set only on the pages you see after signing in, never on a restaurant's public digital menu, and it is kept for one year. Because it measures only our own service and cannot follow you to other websites, it does not need your consent; you can still delete it in your browser settings at any time.
While we compare two versions of our home page, we also store one cookie named landing_variant on your device when you visit that page. It records only which of the two versions you were shown, as the single word "v1" or "v2", so that you see the same version on your next visit and so that we can count how many people create an account from each version. It holds no identifier, so it cannot be used to recognise you, it is never sent to any other company, and it is kept for 30 days. Because it measures only our own service and cannot follow you to other websites, it does not need your consent; you can still delete it in your browser settings at any time.
On your first visit to our home page, blog or sign-up pages, we store one cookie named tfa_acq on your device. It records where you came from — the campaign details of the link you followed, if it had any, and the address of the website that sent you, never the page you were on — plus the first page of ours you saw and the date. We read it only if you later create an account, so that we know which of our efforts brought that account in. It holds no identifier, so it cannot be used to recognise you, it is never sent to any other company, it is never set on a restaurant's public digital menu, and it is kept for 30 days. Because it measures only our own service and cannot follow you to other websites, it does not need your consent; you can still delete it in your browser settings at any time.
Optional cookies
These are only set if you allow them:
Analytics cookies (Google Analytics 4)
We use Google Analytics 4 to count visits and see which pages are used, so we can improve the service. Cookies: _ga and _ga_<property id>, kept for up to two years. Until you accept, Google Analytics runs without cookies and we only receive aggregate counts.
Advertising cookies (Google AdSense) — digital menus only
Restaurants on our free plan have Google ads shown on their digital menu. Google sets cookies to show and measure those ads and to prevent fraud. Because this is Google advertising, your choice on those pages is collected by Google's own consent message, which appears on the menu itself. Typical cookies: __gads, __gpi and cookies set by Google's ad domains, kept for up to 13 months.
How we ask for your consent
The first time you visit our website we ask whether you accept analytics cookies. Essential cookies do not need consent because the service cannot work without them. On the digital menus published by restaurants, advertising and measurement consent is collected by Google's own consent message instead of our banner.
You can change or withdraw your choice at any time. Use the button below, the cookie settings entry in your account menu when you are signed in, or the cookie settings link in the footer of a restaurant's digital menu. You can also delete the cookies and site data for this website in your browser settings.
Cookies set by others
Cookies set by the providers above are read by those providers, who act as our processors or, in the case of Google advertising, as an independent controller. Their own policies explain how they use the data. Our privacy policy lists every provider we use and where your data goes. Privacy Policy
What we do not do
We do not use cookies to build advertising profiles of you across other websites, we do not sell data collected through cookies, and we do not use cookies to make automated decisions about you.
Changes to this policy
When we add, remove or change a cookie we update this page and, where the change requires it, we ask for your consent again. The date at the top shows the last revision.