This policy explains how Hesap Lütfen uses cookies and similar technologies (such as browser local storage). Strictly necessary storage is always on because the Service cannot work without it. Everything else is off until you opt in.
Strictly necessary
| Name | Type | Purpose | Duration |
|---|---|---|---|
| gbp_consent | Cookie | Remembers your cookie choices | 180 days |
| auth_token, auth_user | Local storage | Keeps restaurant staff signed in to the dashboard | Until sign-out (token expires after 30 days) |
| hl_cart | Local storage | Remembers the guest’s cart | Until the order is placed or cleared |
| gbp_table_* | Local storage | Verifies the table you scanned so orders reach the right table | 12 hours |
| lang_* | Local storage | Remembers the menu language you picked | Until cleared |
| gbp_contact, gbp_last_order_* | Local storage | Pre-fills your details and links to your last pickup/delivery order on this device | Until cleared |
| XSRF-TOKEN, session | Cookie | Security for API requests | Session / 2 hours |
Analytics (optional)
Used only if you click “Accept all” or enable Analytics. They help us understand which features are used so we can improve them. We currently do not load any analytics scripts; if we add one, it will appear here before it is used.
Marketing (optional)
Used only with your consent to measure advertising campaigns. Turning marketing off is equivalent to opting out of the “sale” or “sharing” of personal information under California law. If your browser sends a Global Privacy Control signal, marketing cookies stay off automatically.
Restaurant menus
Menus that restaurants publish with Hesap Lütfen only use strictly necessary storage, so guests are not shown a cookie banner there. Payment providers you are redirected to (for example Stripe) set their own cookies under their own policies.
Managing cookies
You can change your choice at any time with the button above or via “Cookie settings” in the footer. You can also delete cookies in your browser settings.