Cookie Policy

1. Cookies and similar technologies

Cookies are small text files a website may place on a device. Similar technologies include local storage, session storage, pixels, and software development kits. This policy uses “cookies” broadly where helpful, while identifying the storage we actually use.

2. Public website technology

The site loads its static pages from GitHub Pages and public menu, location, and order-status data from Convex. Those providers may maintain server logs containing IP address, request time, browser or device details, request identifiers, function names, and error or security information. Server logs are not browser cookies and cannot be controlled by a cookie button on this site.

Pages request Inter and Sora font files from Google Fonts. This causes your browser to connect to Google and provide ordinary network-request information. The site does not use Google Analytics.

An earlier version of the site stored lunchbox_cookie_preference_v1 in local storage. The current code does not read or update that record. If it remains in your browser from an earlier visit, you can remove it by clearing this site’s browser storage.

3. Staff-only browser storage

The separate admin portal uses session storage to keep an authorized staff session active within the current browser tab and local storage to remember whether the admin sidebar is collapsed. The session token is cleared when staff sign out and session storage normally clears when the tab or browser session ends. Server-side session limits still apply.

4. Third-party services

If you choose a Google Maps directions link, an available DoorDash or Uber Eats storefront, or another external link, the destination may use cookies under its own policy. This website does not control storage set after you leave it.

5. Browser controls

You can block third-party requests or clear browser storage using your browser settings. Blocking Google Fonts may cause fallback fonts to appear. Blocking Convex requests may prevent live menu, location, and status information from loading.

6. No sale or targeted advertising

We do not currently sell personal data or use it for targeted advertising. Because the public site has no sale or targeted-advertising activity, a Global Privacy Control signal does not change any site behavior.

7. Changes to this policy

If we add cookies, analytics, advertising, or other browser storage, we will update this page and add a consent or opt-out control before activation when required by law.