1. What this policy covers
This policy explains the cookies and similar on-device storage used by chefnomics.com and the Chefnomics app, run by CHEFNOMICS TECHNOLOGIES W.L.L., trading as Chefnomics (Commercial Registration No. 200684-1). It should be read with our Privacy Policy.
Our approach. We use only what the app needs to work. We use no advertising cookies and no analytics or tracking cookies, and we do not sell data collected through cookies.
2. Cookies we set
| Name | What it does | Who sets it | How long it lasts | Security settings |
|---|---|---|---|---|
| costflo_session | Keeps you signed in | Chefnomics | Until you close the browser, or 30 days if you choose "Remember me" | HttpOnly, Secure, SameSite=Lax |
| costflo_active_brand | Remembers which restaurant is open | Chefnomics | 1 year | HttpOnly, Secure, SameSite=Lax |
| chefnomics_device | Recognizes a device you have used before, so we can email you about sign-ins from new devices | Chefnomics | About 13 months (400 days) | HttpOnly, Secure, SameSite=Lax |
| cf_lang | Remembers the language you chose on the website | Chefnomics | 1 year | SameSite=Lax |
All four are strictly necessary: without them you could not stay signed in, we could not remember which restaurant you have open, we could not warn you about sign-ins from unknown devices, and the website would forget your language.
3. On-device storage
Your browser's local storage holds:
- two display choices on the Pricing screen: whether to show prices with VAT and whether to include delivery packaging;
- unfinished Chef AYA work, so it can be restored if the page reloads. It is kept per login and restaurant, cleared when you submit, choose "Start fresh" or sign out, and dropped after 14 days.
This storage stays on your device. It is not used to track you.
4. Third-party services
Two services we use may set their own cookies or storage when you use them:
- Tap Payments, on its hosted payment page, when you pay for a plan. Tap runs that page under its own policies and may set its own cookies there.
- Cloudflare Turnstile, a bot check that may run when you sign up. We may use it to check that a sign-up is made by a person. It is run by Cloudflare under Cloudflare's own privacy terms.
We do not add any third-party advertising or analytics tools. Our error-reporting tool, Sentry, records errors only, with no session recording and no visit tracking. It removes names, emails, cookies and request contents before a report is sent, and it stores its data in the EU.
5. Managing cookies
You can delete cookies or block them in your browser settings. Because ours are needed to sign you in, blocking them means you will not be able to use the app. Signing out, or closing the browser when "Remember me" is off, ends your session cookie.
6. Changes and contact
If we add any cookie that is not strictly necessary, we will update this policy and ask for your consent first. This is version 1.0, effective 5 November 2026.
CHEFNOMICS TECHNOLOGIES W.L.L., trading as Chefnomics, Level 2, Unit 202, The Terminal, Building 120, Road 3803, Manama, Kingdom of Bahrain. Email: support@chefnomics.com.