Cookie Policy

This policy explains the cookies and similar technologies ProCafe uses, why, and how you can control them. It sits alongside our Privacy Policy. It is written for UK rules (PECR and UK GDPR).

Strictly necessary cookies

These are required to run the service and are set without asking, because the service cannot work without them (the PECR “strictly necessary” exemption). They are not used for tracking or advertising:

• Session cookie — keeps you signed in to the app after you log in.
• “Remember this device” cookie — only if you choose it, so that browser can skip the two-factor step for a while.
• Consent cookie (procafe_consent) — remembers your separate Analytics and Marketing choices so we don't ask again. It stores only the consent version and an on/off value for each purpose, and lasts about six months.

Regional preference cookie (functionality)

The region cookie (procafe_market) remembers which regional site you selected or we detected (for example the UK or French site) so links, prices and guidance stay right for you as you move between our pages. It stores only a two-letter region code — or off if you have asked us not to remember your region. When it is set automatically (because you visited a regional page) it lasts only until you close your browser. It is kept for one year only when you ask us to: after you pick a region with the selector in the footer, a small prompt offers to remember it, and only choosing “Remember” stores the one-year cookie. The prompt stays on screen until you answer or dismiss it — it never times out. (So the prompt can appear after the page changes, picking a region also leaves a temporary marker named procafe-region-remembered in your browser's session storage for a few seconds; it is removed automatically and never leaves your browser.) The “off” choice below is likewise kept for one year. It is a functionality cookie, not strictly necessary — the site works without it; we would simply pick a suitable regional site again on your next visit. It is never used for tracking or advertising.

If you would rather we did not remember your region, you can switch this off here at any time: Forget regional preference. While it is off we do not store your region again, even as you keep browsing regional pages — the cookie only records your choice to switch it off. You can turn it back on with the same control, and you can also clear the cookie in your browser settings.

Analytics cookies (optional — off until you agree)

On our public pages (marketing, customer stories, help, legal, security, contact and signup) we use Google Analytics to understand visits and traffic at a high level. These are optional: we do not load Google Analytics or set any analytics cookies until you accept. Google Analytics sets cookies such as _ga and _ga_<id> to tell repeat visits apart. Usage data is shared with Google as a sub-processor. Analytics is never loaded in the signed-in app or the internal admin area.

Marketing measurement (optional — off until you agree)

When Meta advertising measurement is configured, the separate Marketing choice controls Meta Pixel and our Meta Conversions API events. We use these tools to measure whether a Meta ad led to a verified trial or paid subscription and to improve ad delivery. The Pixel is not loaded, and no Meta advertising event is sent, until you turn Marketing on. Rejecting Analytics does not prevent you from separately accepting Marketing, or vice versa.

Meta Pixel may set _fbp (a browser identifier) and _fbc (an ad-click identifier). For a consented conversion we may send Meta those identifiers, a one-way hash of the account email and internal user identifier, the IP address, browser user-agent, event time and the ProCafe page where the event occurred. Raw passwords, food-safety records and other signed-in operational data are never sent. Checkout attribution is retained by ProCafe for no more than 90 days and is cleared when Checkout is started without current Marketing consent.

Meta may use consented event data for matching, measurement, ad delivery and audience improvement under the Meta Business Tools Terms. Depending on the purpose, Meta acts as our processor, as a joint controller with ProCafe, or as an independent controller after receiving the data. You can withdraw Marketing here at any time and can also manage activity in your Meta account and through Your Online Choices.

How we ask for consent

On your first visit to a public page we show a cookie banner. Analytics and Marketing both default to denied. “Accept all” enables both when Marketing is configured; “Manage choices” lets you decide separately; and “Reject non-essential” keeps both off. An older analytics-only “granted” choice is never treated as Marketing consent.

Changing your choice

You can change your mind at any time using Cookie settings here or the “Cookie settings” link in the footer of any public page. You can also clear or block cookies in your browser settings. If you withdraw a category we clear its first-party cookies where we can and reload the page to stop that tool. Withdrawal applies to future processing; it does not undo an event already sent for an action completed while consent was active.

More information

See our Privacy Policy for how we handle personal data and our Sub-processor List for the third parties involved. Questions: support@procafe.app.