Cookie policy

Advertising and usage recording, only with your consent

On our public marketing pages (and only there) we use the Meta pixel to measure our advertising: which ads bring visitors and whether our campaigns work. Where the law requires prior consent (the European Economic Area, the United Kingdom and Switzerland), it loads only if you accept it on the consent dialog; rejecting it loads nothing from Meta. Elsewhere it loads by default and you can opt out at any time with the button below; a refusal is honoured wherever you are. The pixel is never present inside the application once you sign in, nor in the iOS and Android apps.

We also measure which pages bring people to Nutria using our own Umami instance on our own servers. That page-view count sets no cookies, records no personal data and never follows you to another site, so it works for everyone and needs no consent.

Separately from that count, and only if you agree to it, the same tool records the session on these marketing pages: scrolling, clicks, cursor movement and the content of the page, so we can replay afterwards how it was navigated and see what breaks. Whatever you type into form fields is always masked and never recorded. It is a different script from the counter: reject it and it is never loaded, while the counter carries on unchanged. It never runs inside the app once you sign in, nor in the iOS and Android apps.

First-party cookies (strictly necessary)

nutria_session: keeps you signed in. It is an httpOnly cookie (code running on the page cannot read it, which protects your session from malicious scripts), it is sent over HTTPS only and lasts 30 days or until you sign out.

nutria_csrf: a security token the application sends back with every action to stop other websites from making requests on your behalf (CSRF protection). It lasts 30 days or until you sign out.

Browser local storage

Besides cookies, we keep in local storage: your preferred language, drafts of foods or dishes you leave half-created, your answer to the ads-measurement banner, how you first arrived at Nutria (campaign tags and landing page, sent once with the registration if you create an account and otherwise never) and, only in the native iOS and Android apps, the session token. They are removed when you sign out or clear the browser or app data.

Third-party cookies on specific features

On payment pages, Stripe (our payment processor) sets its own cookies (such as __stripe_mid and __stripe_sid) to process the payment securely and prevent fraud.

On the registration form we use Cloudflare Turnstile to block bots; Cloudflare may set a technical cookie for that sole purpose.

If you accepted ads measurement on our marketing pages, Meta sets its _fbp cookie there to recognise your browser for that purpose; clearing this site's data in your browser withdraws that choice and makes the banner ask again.

These cookies only appear when you use those features and are necessary to provide them securely (or, for Meta, only after your consent). Outside those cases no third-party service is loaded in your browser.