Cookie policy

Cookies are small files a website can store in the browser to remember information between requests. Similar technologies, such as local browser storage, can retain preferences or functional state.

Applicable rules distinguish technologies needed to provide a requested service from optional technologies such as certain advertising or tracking tools.

Necessary technologies support requested features and security. Analytics is optional, off by default, and rejecting it does not disable essential features.

• qr-esp-sb-access-token: maintains authenticated dashboard access; session duration; first-party technical cookie.
• qr-esp-sb-refresh-token: securely renews an authenticated session; session duration; first-party technical cookie.
• menudoqr-interface-locale: remembers the interface language; one year; first-party technical cookie.
• menudoqr-cookie-consent: stores the preference version, Analytics choice and date; 180 days; first-party technical cookie.
• qr_review_…: prevents the same review from being repeatedly submitted within a short period; one hour; first-party security cookie.
• Stripe technical cookies: may be set when checkout or a payment form is opened for fraud prevention and secure payment operation.

Names, duration or purpose may be adjusted where needed for platform security or operation. This page will be updated after a material change.

MenudoQR uses local storage, which is not automatically sent to the server like a cookie, to remember specific functions:

• The language and visual theme selected in a public menu.
• References needed to view recent orders from the same device.
• Dashboard visual state, such as the sidebar or collapsed help.
• Confirmations already shown after certain billing actions.
• When Analytics is accepted, transaction identifiers already sent so a purchase is not repeated after refresh.

This information remains on the device until the feature removes it, it becomes invalid or the user clears website data.

With your consent, we use Google Analytics 4 (measurement ID G-D3S837K152) and Vercel Web Analytics to measure visits, navigation and service conversions. Google Analytics may create _ga and _ga_… cookies; Vercel Web Analytics does not use cookies.

Before acceptance, neither analytics service is loaded and no analytics events are sent. Advertising signals remain disabled, and we do not send email, name, phone, address or payment secrets.

You can accept, reject or configure Analytics in the initial notice and change your choice later through “Cookie settings” in the footer. Withdrawing permission stops measurement and removes Google Analytics cookies accessible to the site.

You can also delete cookies and local storage in browser settings. Blocking all cookies may prevent necessary features such as sign-in from working correctly.

Current instructions are normally available in the browser help under Privacy, Cookies, Site data or History.

We will update this policy if the technologies or purposes described here change materially.

For questions about cookies or privacy, email gp20eu@gmail.com.