Cookie and browser storage policy

Necessary cookie: refresh_token is an HttpOnly, SameSite=Strict authentication cookie scoped to /api/auth. It lasts up to 30 days and is removed when the session is revoked or expires. Necessary browser storage: restaurant-cookie-consent-v2 saves your essential, analytics, and marketing choices until you clear browser storage or change your choice. Preference browser storage: restaurant-locale remembers the selected language until you clear browser storage. Analytics and advertising: this deployment does not load analytics, advertising pixels, or marketing trackers. Identity providers: Google sign-in is available only in the sign-in dialog; Apple sign-in loads its SDK after you press the Apple button. These providers may process network/device information and set provider-controlled cookies under their own policies. Mobile apps do not use website cookies. They store app authentication and language preferences using app storage.