Rules for cookies, localStorage, sessionStorage and optional analytics used by OrderNow.
Last update: 12.03.2026
This policy explains how OrderNow uses cookies and similar technologies on the website, marketing pages, customer-account flows, restaurant-menu flows and order-tracking pages.
Necessary technologies remain active because they are required for login, ordering, table-session and security functions. Optional analytics is disabled by default and activates only after consent.
Manage optional analytics
You can change your choice at any time. Necessary cookies and browser storage remain active because they are required for login, session security, ordering and cart continuity.
Optional analytics: disabled
These cookies are required for the electronic service explicitly requested by the user, such as login, table ordering, guest-session continuity and secure order tracking.
| Name | Scope | Purpose | Retention |
|---|---|---|---|
| restaurant_session | QR table menu flow | Stores the restaurant slug and table token so the guest remains attached to the correct table session. | 3 hours |
| ordernow_guest_id | Guest ordering flow | Assigns an anonymous guest identifier for order continuity, coupon checks and abuse prevention. | 180 days |
| ordernow_ot_* | Order tracking | Binds the signed order-tracking token to the browser session and protects private access to order status. | 12 hours |
| next-auth.session-token / __Secure-next-auth.session-token | Login and account | Maintains the authenticated session for customer and staff accounts. | Up to 30 days or logout |
| next-auth.csrf-token, callback-url, state / PKCE cookies | Authentication security | Protects login forms and safely completes Google OAuth redirects. | Session or short-lived |
OrderNow also uses browser storage to preserve the basket, delivery form and selected interface safeguards. These entries are first-party and remain on the device until they expire, are overwritten or are deleted by the user.
| Name | Scope | Purpose | Retention |
|---|---|---|---|
| cart_\${slug} | Menu cart | Remembers the current basket for a selected restaurant. | Until overwritten or cleared by the user |
| delivery-address:\${slug} | Delivery checkout | Stores the delivery-address form, including latitude, longitude and delivery instructions. | Until overwritten or cleared by the user |
| active_order_data, guest_session_\${slug} | Guest and order continuity | Helps restore the in-progress order state and guest session on the device. | Until overwritten or cleared by the user |
| feedback-source:*, feedback-prompted:*, service-request:* | Interface state | Prevents duplicate prompts and repeated service or bill requests. | Until overwritten or cleared by the user |
If you consent, OrderNow enables optional analytics to measure visits, content performance, campaign attribution and website speed. Declining analytics does not block the main service.
| Name | Scope | Purpose | Retention |
|---|---|---|---|
| ordernow:first_touch_attribution | sessionStorage | Stores first-visit attribution data such as UTM parameters, landing page and referrer host. | Session |
| ordernow:organic_session_started | sessionStorage | Prevents duplicate organic-session analytics events during the same browser session. | Session |
Optional third-party tools
You can change your choice at any time using the controls on this page or by clearing cookies and site data for OrderNow in your browser.
Browser settings also allow blocking or deleting cookies, but doing so may disrupt login, table-session, basket or order-tracking features.
Questions about cookies or browser-stored data can be sent to Robert Dziak, operating an unregistered business activity under the OrderNow brand at kontakt@ordernow.pl.