Cookie policy
The four things we store on a device, and what each is for.
Last updated 8 September 2026
Draft pending legal review.
We use no advertising cookies, no analytics cookies, and no third-party trackers. Everything below is necessary for the service to work.
On a guest's device
- `rb_guest_session` — a random identifier so a guest can close the browser, scan again, and still see their order. It contains no personal information. Set when a guest first scans a code, and it expires.
- Your basket is kept in the browser's own storage, on the device, until the order is placed. It never leaves the device until you press Place order.
On a staff or administrator device
- `sb-…-auth-token` — the sign-in session for staff and administrators. Necessary to stay signed in.
- A dismissal note for one-off messages, such as a subscription warning, kept only until the browser is closed.
Your choices
Because all of these are strictly necessary to provide a service you have asked for, they do not require consent under the ePrivacy Directive. There is nothing to opt out of, and no setting to change. Clearing your browser's storage removes all of them; a guest doing so will need to scan the code again.
Contact
Write to privacy@thewaiterbutton.com.