Rules for cookies, localStorage, sessionStorage and optional analytics used by OrderNow. Last update: 05.05.2026
This policy explains how OrderNow uses cookies and similar browser technologies on the marketing website, account flows, restaurant-menu flows, delivery flows, staff panels and order-tracking pages.
Necessary technologies remain active because they are required for login, ordering, table sessions, security and remembering the user's cookie choice. Optional analytics is disabled by default and starts only after consent.
Current OrderNow runtime does not use Google Analytics, GA4, Google Tag Manager or the former AI-referrer attribution cookie.
Manage optional analytics
You can change your choice at any time. Necessary cookies and browser storage remain active because they are required for login, session security, ordering and cart continuity.
Optional analytics: disabled
These entries are used to provide an electronic service requested by the user or to secure the service. Disabling them in browser settings may break login, order submission or order tracking.
| Name | Technology | Scope | Purpose | Retention |
|---|---|---|---|---|
| ordernow_cookie_preferences | cookie | Consent management | Stores the user's cookie choice, consent version and update date so the banner does not reappear on every visit. | 180 days or until changed/cleared |
| ordernow:cookie-preferences | localStorage | Consent management | First-party backup of the same cookie-preference choice used by the preference controls. | Until changed or cleared by the user/browser |
| restaurant_session | HttpOnly cookie | QR table menu | Stores the restaurant slug and signed table token so the guest remains attached to the correct table session. | 3 hours or until visit ends |
| ordernow_guest_id | HttpOnly cookie | Guest ordering | Assigns a signed anonymous guest identifier for order continuity, coupon checks and abuse prevention. | 180 days |
| ordernow_ot_* | HttpOnly cookie | Order tracking | Binds the signed order-tracking token to the browser session and protects private order-status channels. | 12 hours |
| next-auth.session-token / __Secure-next-auth.session-token | cookie | Login and accounts | Maintains authenticated sessions for customer, restaurant and staff accounts. | Up to 30 days or logout |
| next-auth.csrf-token, callback-url, state / PKCE cookies | cookie | Authentication security | Protects login forms and safely completes Google OAuth redirects. | Session or short-lived |
| ordernow_google_legal_intent | HttpOnly cookie | Google account registration | Stores a short-lived signed proof that the required legal documents were accepted before starting Google account creation. | 10 minutes or until OAuth callback |
OrderNow also uses first-party browser storage for interface continuity. These entries stay on the user's device and are not shared with third-party advertising networks.
| Name | Technology | Scope | Purpose | Retention |
|---|---|---|---|---|
| cart_\${slug} | localStorage | Restaurant menu cart | Remembers the current basket for the selected restaurant on the user's device. | Until order, overwrite or manual clearing |
| delivery-address:\${slug} | localStorage | Delivery checkout | Stores the delivery-address form, including recipient details, latitude, longitude and delivery instructions. | Until overwritten or cleared by the user |
| active_order_data | localStorage | Order continuity | Restores the active order identifier and tracking state after a page refresh. | About 12 hours or until overwritten/cleared |
| guest_session_\${slug} | localStorage | Guest session continuity | Helps keep a temporary guest session for the selected restaurant on the same device. | About 6 hours or until overwritten/cleared |
| feedback-source:*, feedback-prompted:* | localStorage | Feedback prompts | Prevents duplicate feedback prompts and remembers the source of a post-order feedback flow. | Until overwritten or cleared by the user |
| service-request:* | localStorage | Waiter and bill requests | Prevents repeated service or bill requests from the same browser during a short interaction window. | Until overwritten or cleared by the user |
| ordernow:chat_widget_dismissed | sessionStorage | Marketing chat widget | Remembers that the visitor dismissed the chat widget in the current browser session. | Session |
| kds_show_prices, kds_compact_mode | localStorage | Kitchen display settings | Remembers staff interface preferences for the kitchen display board. | Until changed or cleared by the user/browser |
| ordernow_staff_notifications:\${restaurantId} | localStorage | Staff notifications | Stores a local copy of recent staff notifications so the panel can recover state after refresh. | Up to 12 hours, 100 latest entries, or manual clearing |
If the user consents, OrderNow enables optional Vercel Analytics and Vercel Speed Insights to measure visits, content performance, campaign attribution and website speed. Refusing analytics does not block the core service.
| Name | Technology | Scope | Purpose | Retention |
|---|---|---|---|---|
| ordernow:first_touch_attribution | sessionStorage | Marketing attribution | Stores first-visit attribution data such as UTM parameters, landing page and referrer host. | Session |
| ordernow:organic_session_started | sessionStorage | Marketing analytics | Prevents duplicate organic-session analytics events during the same browser session. | Session |
Optional providers
The choice can be changed at any time using the controls on this page or by clearing cookies and site data for OrderNow in the browser.
Questions about cookies or browser-stored data can be sent to Robert Dziak, operating an unregistered business activity under the OrderNow brand at kontakt@ordernow.pl.