Cookie Policy

This Cookie Policy explains how NoFee LLC ("NoFee") uses cookies and similar technologies on nofee.restaurant and the NoFee Service.

1. What Are Cookies?

Cookies are small text files placed on your device by websites you visit. They are widely used to make websites work, improve user experience, and provide analytics. We also use similar technologies such as local storage, session storage, and pixels.

2. Categories of Cookies We Use

2.1 Strictly Necessary (always on)

Required for the Service to function. Cannot be disabled without breaking core features.

• nofee_token — restaurant authentication session;
• nofee_amb_token — ambassador authentication session;
• CSRF protection cookies;
• Load-balancer routing cookies.

2.2 Functional

Remember preferences like language, region, and UI settings.

• Selected display language (EN / ES / PT);
• Cookie consent preferences (so we don't ask you again).

2.3 Performance & Analytics

Help us understand how the Service is used. Aggregated and anonymized where possible.

• Sentry — error monitoring and performance traces (captures stack traces, timing, basic environment info; does NOT capture passwords, payment details, or full request bodies);
• Session replay (when enabled) — records user interactions to debug bugs. Sensitive inputs are automatically masked.

2.4 Marketing

We currently do not use third-party advertising cookies. If we add them in the future, you will be asked for consent and this policy will be updated.

3. Third-Party Cookies

The following third parties may set cookies via the Service:

• Stripe — payment processing (set on checkout pages);
• Sentry — error monitoring;
• Cloudflare — DDoS protection and CDN.

4. Managing Your Cookie Choices

• When you first visit the Service, you may see a cookie banner allowing you to accept or reject non-essential cookies.
• You can change your choice at any time by clearing your browser's cookies and revisiting the site.
• You can disable cookies in your browser settings (Chrome, Safari, Firefox, Edge all offer this). Note that disabling Strictly Necessary cookies will break core functionality (login, ordering, etc.).
• For Do Not Track signals: we currently do not respond to DNT headers, as there is no industry-wide standard.

5. Cookie Lifespan

• Session cookies — deleted when you close your browser;
• Persistent cookies — remain until expiration or you delete them. Authentication tokens typically last 7 days (restaurants) or 30 days (ambassadors).

6. Changes to This Policy

We may update this Cookie Policy as we add or remove cookies. The "Last updated" date at the top reflects the most recent revision.

7. Contact

Questions about cookies? Email support@nofee.restaurant.