Cookies and privacy choices

Service cookies

A session cookie keeps you signed in. A trusted-device token is set only when you choose to remember a device for two-factor authentication. The procafe_consent cookie retains the consent version and separate Analytics and Marketing choices for about six months. These service cookies are not advertising identifiers.

Region memory

procafe_market stores a two-letter public-site region or ‘off’. Automatic regional navigation memory lasts for the browser session. A one-year preference is stored only when you choose Remember in the region prompt; choosing not to remember is also retained for one year. A temporary procafe-region-remembered session-storage marker lets the prompt follow navigation and is removed automatically. This preference is not a customer account's country and is not used for advertising.

Analytics and marketing

Google Analytics is optional on public pages and does not load until Analytics is accepted. It can set _ga and _ga_<id> to distinguish visits. It is not loaded in the signed-in operational app or internal administration.

When configured, a separate Marketing choice enables Meta Pixel and consent-bound Conversions API measurement. Meta may receive _fbp or _fbc identifiers, hashed email and user identifiers, IP address, user agent, event time and source page. Operational records and passwords are excluded. Checkout attribution is held for no more than 90 days and cleared when checkout starts without current Marketing consent. Meta's processor, joint-controller or independent-controller role depends on the purpose in its Business Tools Terms.

Your controls

Both optional categories start off. Accept all enables the configured categories, Manage choices lets you decide separately, and Reject non-essential keeps them off. An older analytics-only choice is not advertising consent. Change either choice here or in any public footer. On withdrawal we clear relevant first-party cookies where possible and reload to stop the tool. Withdrawal stops future processing; it does not recall events already sent with consent. You can also use browser controls and your Meta account's activity settings.