Cookie policy
Plain language about what MenuDoro stores in your browser. Updated 12 October 2026.
Consent
We only set essential cookies needed to run the product (sign-in and table ordering). We do not use analytics or advertising cookies on MenuDoro. The notice at the bottom of the page tells you this: whether you accept or refuse, only the essential cookies below are set, and nothing optional is ever loaded. Your choice is remembered for 12 months and you can change it here. Exception: if you click Accept, a small first-party script counts a few actions (opening the demo, starting sign-up, starting the founding checkout) as anonymous totals per page and day. It sets no cookie, stores nothing in your browser and sends no IP or identifier to third parties. With Refuse or no choice, nothing is counted.
Cookies we set
| Name | Purpose | Duration | Flags |
|---|---|---|---|
menudoro_session |
Owner / kitchen / staff session. Lets the dashboard and kitchen screen stay signed in. HttpOnly so JavaScript cannot read it. | About 30 days (owner/server) or 90 days (kitchen) | HttpOnly; SameSite=Lax; Path=/; Secure on HTTPS/production |
menudoro_table_* |
Guest table claim after scanning a table QR. Required to add dishes and submit orders for that table. | About 12 hours | HttpOnly; SameSite=Lax; Path=/; Secure on HTTPS/production |
menudoro_oauth_state |
Short-lived CSRF state while signing in with Google. Cleared after the callback. | About 10 minutes | HttpOnly; SameSite=Lax; Path=/; Secure on HTTPS/production |
menudoro_google_signup |
Keeps a Google sign-up in progress while you finish creating the restaurant. Removed when setup completes. | Up to 1 hour | HttpOnly; SameSite=Lax; Path=/; Secure on HTTPS/production |
md_ref |
Referral link: remembers which referral link (code) you first arrived through, so a restaurant that signs up is credited to that referrer. No other data. | 60 days | HttpOnly; SameSite=Lax; Path=/; Secure on HTTPS/production |
md_refsess |
Referrer panel session, set only when a referrer logs in with an email code. | About 30 days | HttpOnly; SameSite=Lax; Path=/; Secure on HTTPS/production |
Local storage (not cookies)
Some preferences stay in your browser's local storage, not as cookies, and are never sent to us automatically: the interface language (menudoro_ui_lang, platejev_lang) and your cookie choice (menudoro_cookie_choice). On guest menus: a device name and ID for the shared table basket, the table number, the price filter and the list layout. The kitchen screen remembers its venue, the sound setting and the orders it has already shown. While you sign up, your progress is kept in session storage until you close the tab.
Third parties
- Cloudflare Turnstile: bot checks on some sign-up and code forms when configured. It may set cookies that belong to Cloudflare. cloudflare.com/privacypolicy
- Stripe Checkout: when you pay for a MenuDoro plan, Stripe’s hosted checkout may set its own cookies. stripe.com/privacy
- Google OAuth: if you choose Continue with Google, Google’s sign-in uses Google cookies on Google’s domains. policies.google.com/privacy
Managing cookies
You can delete cookies in your browser settings. Clearing menudoro_session signs you out. Clearing menudoro_table_* ends the guest table claim (scan the QR again to order). Logging out from Admin or Kitchen clears the session cookie on our side.
Contact (data controller for owner accounts): contact@menudoro.com