Cookie and Browser Storage Policy
Last updated: October 28, 2026. This policy complements the Privacy notice.
1. Who we are and what this covers
Click2Bite runs Click2Bite. Contact: [email protected].
Cookies are small pieces of data your browser keeps and sends back to our server. Browser storage (localStorage and sessionStorage) keeps data on your device; sessionStorage lasts while the tab is open. A “validity” used by our service doesn't always mean the browser deletes the item at that moment.
2. What we use them for
To keep you signed in, protect forms, complete connections you authorize, run carts, remember preferences and provide features you ask for. We also use our own measurement of where orders come from and of label scans, and attribution of invitations between businesses; we describe them separately below.
We don't use cross-site behavioral advertising tags or third-party analytics such as Google Analytics. That doesn't mean map or payment providers receive nothing: when their services load, they may use their own technologies (see section 5).
3. Our cookies
| Name | Purpose | Duration | Type |
|---|---|---|---|
c2b.auth | Keeps the dashboard (or a linked kitchen tablet) signed in. | 12 hours, renewed while you use the dashboard; kitchen tablets linked with a code: 180 days. | Access |
c2b.af | Protects forms against cross-site request forgery. | Browser session. | Security |
c2b.msg | Shows the one-time confirmation after an action (“Saved”). | Browser session; deleted when shown. | Function |
c2b.lang | Remembers the language you chose. | 1 year. | Preference |
c2b.country | Remembers the country you chose for prices and legal versions. | 1 year. | Preference |
c2b.google.state | Protects the connection you authorize with Google Business Profile. | 10 minutes. | Security |
c2b.mp.state | Protects the connection you authorize with Mercado Pago. | 15 minutes. | Security |
c2b.ref | Credits an invitation between businesses (referral program). | 30 days. | Own promotion |
c2b.nuevo | Adds the order you just placed to “My orders” on this device. | Up to 2 days; deleted once used. | Function |
c2b.d + label code | Avoids counting the same scan of a “Order direct” label twice. | 12 hours. | Own measurement |
Access, security and connection cookies are technical. Language and country store your preferences. Invitation attribution and label counting are our own promotion and measurement: we don't treat them as “necessary” just because a setting in our code says so.
4. Browser storage
| Item | Content and purpose | How long |
|---|---|---|
c2b.cart.[store] | Products in your cart. | No automatic expiry; updated or removed with your order, or when you clear site data. |
c2b.src.[store] | Where you came from (Google, QR, label) to attribute the order. | Treated as valid for 24 hours; may stay stored until cleared. |
c2b.coupon.[store] | Coupon you want to apply. | 24 hours, plus the coupon's own conditions. |
c2b.welcome / c2b.welcome.used / c2b.giftbanner.[store] | Welcome gift and a local note that it was used. | Depends on the gift; some entries have no automatic deletion. |
c2b.loyal.[store] | Local copy of your loyalty card. | No automatic expiry. |
c2b.last.[store] | Details to repeat an order. | No automatic expiry. |
c2b.customer / c2b.addr | Your contact details and address, only if you choose “Remember my details”. | Until you change them or clear site data. |
c2b.orders | Links to your recent orders on this device (“My orders”). | Trimmed to 60 orders and 1 year when used. |
c2b.transfer | Moves a cart between branches when you ask for it. | 30 minutes. |
c2b.cookies.ok | Remembers that you closed the cookie notice. | No automatic expiry. |
c2b.driverId / c2b.driverName | Remembers the driver selected on a shared device. | No automatic expiry. |
Kitchen, install and tutorial preferences (c2b.kitchen.*, c2b.install.dismissed, c2b.tour.*, c2b.active) | Volume, text size, checklists, install prompt and tutorial progress. | Some persist until cleared; review marks and some tutorials use session storage. |
Some items contain personal data or links that open your orders: take care on shared devices. Items are separated by store, but all stores share the same site. When you use a feature (for example, sending an order with a remembered address) that data is sent to us as part of the order.
5. Outside services and permissions
When you use maps, payments or connected services, your browser may talk to Google, Stripe or Mercado Pago, which apply their own notices and may process data outside your country (see the Privacy notice). Location and notification permissions are also managed by your browser or operating system; notifications use a technical subscription stored by us to deliver them. The installable app may cache files to work. Clearing cookies alone may not clear these other data or permissions.
6. Your choices
You can view, block or delete cookies and site data in your browser settings, and withdraw location or notification permissions. Deleting data may sign you out, empty your cart and preferences, or remove order links kept only on that device. It does not cancel a subscription or delete records on our server (for that, see the Privacy notice).
The “Got it” button on our cookie notice only records that you closed the notice: it is not consent to all cookies, does not authorize advertising and does not waive any right. Optional features that need consent stay off until you give it and can be withdrawn just as easily. Where the law recognizes an opt-out or a browser signal (such as Global Privacy Control), we honor it within its scope. If we ever add advertising or analytics tools, we'll update this policy and the controls before using them.
7. Questions and changes
Write to [email protected]. We'll publish the date of any change and tell you about relevant changes as explained in the Privacy notice.