Version 2 · Effective 2026-08-05
12.1 What cookies are
Cookies and similar storage technologies place or read information on a device. Some are essential for a service requested by the user; others require consent.
12.2 Essential technologies
Essential cookies may be used for secure login, authentication, account security, session management, basket contents, checkout, fraud prevention, load balancing and recording privacy choices. They are used only as necessary to provide or protect the requested service.
12.3 Optional analytics and marketing
Optional analytics, advertising or behavioural technologies must not load before the user gives valid consent. Continuing to browse is not consent. Users must be able to accept, reject and later change optional choices easily. Alicedda should launch without marketing cookies unless a genuine tool, purpose, retention period and consent mechanism have been approved.
12.4 Current cookie register
This table is a frozen snapshot of the Cookie and Storage Register, generated from a live browser scan carried out on 2026-08-03 under consent notice version 2026-07-v1. The live register is published at /privacy/cookies; this snapshot stays with this version of the notice.
| Name | Type | Provider | Purpose | Category | Duration | Consent required? |
|---|---|---|---|---|---|---|
| alicedda.basket.v1 | Local storage | Alicedda Catering Services (first party) | Keeps the food or tableware items you have deliberately added to your basket. | Strictly necessary | Seven days from the last basket change. Removed sooner when you empty the basket, complete the order or clear your browser storage. | No |
| alicedda.cookie-consent | Local storage | Alicedda Catering Services (first party) | Records your cookie and storage choices so the website honours them and does not keep asking unnecessarily. | Strictly necessary | Six months from the moment you choose. After six months we ask again, and we also ask again straight away if the notice version materially changes. Removed sooner if you clear your browser storage. | No |
| sb-qudjidtdwdvhltvffutv-auth-token | Local storage | Supabase (managed cloud backend, processor for Alicedda) | Maintains the signed-in session after a customer or authorised staff member chooses to sign in. | Strictly necessary | Lasts for the signed-in session. The access token is short-lived and refreshed automatically while you stay signed in, and the whole record is deleted from the device when you sign out. Present only while signed in. | No |
| alicedda_beta | HttpOnly cookie | Alicedda Catering Services (first party) | Authenticates a private client-review session while the invitation-only review programme is switched on. | Strictly necessary | The review session length configured in the CMS (currently 12 hours). The cookie is cleared when the reviewer ends the session and when the review programme is switched off. Used only while the private Client Review Beta is switched on in the CMS. The programme is currently switched off, so this cookie is not in use. | No |
No analytics, marketing or advertising technologies are currently active on the Alicedda website.
The optional consent categories remain available for future controlled use. Before any new technology is used it must be added to the register, blocked until consent is given, covered by a new consent notice version in a new Draft of this notice, and approved again.
12.5 Managing choices
The cookie banner and settings centre should provide equally clear Accept optional, Reject optional and Manage choices controls. Consent records should include the selected categories, policy version and time. Withdrawing consent must be as easy as giving it.
12.6 Third-party links
Clicking the WhatsApp link leaves the Alicedda website and opens an external service. The link itself should not place optional tracking cookies before the user chooses to activate it. WhatsApp applies its own cookies and privacy practices after the user opens that service.