1. The short version
Orderhatch only uses cookies and browser storage that the site needs to work. We do not use analytics, advertising or tracking cookies, and we do not let anyone else put them on our pages. Our fonts are served from our own site, so loading a page does not contact Google or any other third party.
To see which of our own pages people visit, we use Vercel Web Analytics. It sets no cookies and stores nothing on your device: it counts page views and rough details such as country and device type, without identifying you or following you across other sites. It only runs on our public pages about Orderhatch, never on a shop's ordering page, when you sign in, or in the dashboard.
Because everything here is strictly necessary, the law (the Privacy and Electronic Communications Regulations) does not require us to ask for consent, so you will not see a cookie banner. This notice tells you what we use instead.
2. Cookies we use
Customers ordering food get no cookies from Orderhatch. These are only set for people who sign in to run a shop.
| Name | What it does | How long |
|---|---|---|
sb-…-auth-token | Keeps you signed in to your dashboard and order screen. Set by our sign-in provider, Supabase, only when you sign in. (Shop owners and staff) | Until you sign out, or up to 400 days |
sb-…-auth-token-code-verifier | A security check while you finish signing up or resetting your password from an email link. (Shop owners and staff) | Until the link is used |
oh_shop | Remembers which of your stores you were working in. (Shop owners and staff) | 1 year |
oh_connect_state | A security check while you connect your Stripe account, so nobody else can connect theirs to your store. (Shop owners) | 15 minutes |
3. Browser storage on ordering pages
Shop ordering pages save a little information in your own browser. It stays on your device and is never sent to us until you place an order.
| Name | What it does | How long |
|---|---|---|
orderhatch:basket:<shop>Local storage | Keeps your basket for that shop if you close the page before ordering. | Until you order or empty the basket |
orderhatch:customerLocal storage | Only if you tick “Remember my details on this phone” at checkout: your name, email and mobile number, so they are filled in next time. They stay on your device and are not sent to us until you order. | Until you untick the box, tap “Clear details” or clear your browser data |
orderhatch:upsell-seen:<shop>Session storage | Remembers you have already seen the “you might also like” suggestions, so we don’t show them twice. | Until you close the tab |
4. When you pay
When you pay for an order you go to a secure payment page run by Stripe for the shop. Stripe uses its own cookies there, mainly to prevent fraud. Those pages are covered by Stripe's cookie policy, not this notice.
5. Controlling cookies
You can block or delete cookies and site data in your browser settings. If you do, you will need to sign in again, and an unfinished basket will be lost. For how we handle personal data more generally, see our Privacy Policy.
6. Changes
If we ever want to add cookies that are not strictly necessary, such as analytics, we will ask for your consent first and update this notice.