1. What Cookies Are
Cookies are small text files stored on your device by your browser. Similar technologies include local storage, which keeps a value on your device until it is cleared. We use both to operate and secure the Service.
2. Cookies We Use
Strictly necessary — these cannot be turned off
Without these, you cannot sign in and the Service cannot keep you signed in or protect your session.
| Name | Set by | Purpose | Attributes |
|---|---|---|---|
palate_session |
Palate | Identifies your signed-in session in the Admin, POS, and KDS applications | HttpOnly, Secure, SameSite=Lax |
palate_csrf |
Palate | Cross-site request forgery protection. Readable by the application so it can echo the value back in a request header | Secure, SameSite=Lax |
refresh_token |
Palate | Renews a staff session without making you sign in again | HttpOnly, Secure, SameSite=Strict, scoped to the authentication path |
customer_refresh_token |
Palate | Renews a guest session on a restaurant’s ordering site | HttpOnly, Secure, SameSite=Strict, scoped to the guest authentication path, 30 days |
palate_cookie_consent |
Palate | Remembers the cookie choices you made, so we do not ask again. Stored in local storage rather than as a cookie | Local storage, 12 months |
__stripe_mid, __stripe_sid |
Stripe | Fraud prevention on payment forms. Set by Stripe when a checkout page loads | Stripe’s own settings |
| Cloudflare Turnstile | Cloudflare | Confirms a human is submitting the contact and feedback forms on palate.pro | Cloudflare’s own settings |
Functional, analytics, and marketing
The cookie banner lets you accept or decline analytics and marketing cookies, and we record your choice.
As of the effective date of this Policy, Palate sets no analytics cookies and no marketing cookies. We do not run Google Analytics, advertising pixels, or any third-party advertising technology on our websites or in our applications. The categories exist in the banner so that your preference is already on file if we ever introduce them — at which point this Policy will be updated before anything is set.
We use Sentry to capture application errors and performance data. Sentry does not set cookies on your device; it attaches diagnostic context to error reports, and personal information is scrubbed from those reports before they are sent.
3. Managing Cookies
In the Service. Use the cookie banner when it appears, or open cookie preferences from the footer of a restaurant’s ordering site at any time to change your choices.
In your browser. You can block or delete cookies through your browser settings. Blocking strictly necessary cookies will stop you being able to sign in, and the Service will not work.
Global Privacy Control. We honor the Global Privacy Control signal and similar browser-level opt-out preferences. Because Palate does not sell or share personal information and sets no advertising cookies, that signal does not change what we set — but we recognize it and record it.
4. Third-Party Cookies
The only third parties that set anything on your device through the Service are Stripe, on payment forms, and Cloudflare, on the contact and feedback forms at palate.pro. Both are listed in Section 2. Each acts as our service provider, and neither uses what it sets to advertise to you.
The complete list of vendors we use is at https://palate.pro/subprocessors.
5. Changes
We may update this Cookie Policy. We will post the updated version with a new effective date, and we will update it before introducing any new category of cookie.
6. Contact
Questions: hello@palate.pro
FastSail Technologies LLC (d/b/a Palate)
442 W Delhi Rd
Ann Arbor, MI 48103
United States