Cookie Policy

Cookies are small text files that are stored on your device (computer, tablet, or mobile phone) when you visit a website. They are widely used across the internet to make websites function properly, enhance user experience, and provide analytical information to site operators. Each cookie typically contains the name of the domain it originated from, the lifespan of the cookie, and a randomly generated unique identifier.

When you return to a website that has previously set a cookie, the browser sends that cookie back to the server, allowing the site to recognize your device and remember information from your previous visit. This might include your preferred language, items in your shopping cart, or whether you are logged in.

In addition to traditional cookies, similar technologies such as web beacons (also known as pixel tags or clear GIFs), local storage objects, and device fingerprinting may be used to collect and store information. Throughout this policy, we refer to all of these technologies collectively as "cookies" unless we specifically state otherwise.

Cookies can be classified by their lifespan: session cookies are temporary and deleted from your device when you close your browser, while persistent cookies remain on your device for a set period or until you manually delete them. Cookies can also be classified by their origin: first-party cookies are set by the website you are visiting, while third-party cookiesare set by a domain other than the one displayed in your browser's address bar.

Ordeliya ApS ("Ordeliya," "we," "us," or "our") uses cookies across our marketing website (ordeliya.com), our merchant administration dashboard (app.ordeliya.com), and our platform administration interface (admin.ordeliya.com). We use cookies for several important purposes:

• Authentication and security: To verify your identity when you log in, maintain your session while you navigate the platform, and protect against unauthorized access to your account.
• Preferences and settings: To remember your chosen language, display preferences, dashboard configuration, and other settings so you do not have to re-enter them each time you visit.
• Performance and reliability: To monitor how our services perform, detect errors, and ensure our infrastructure operates smoothly so that merchants can rely on the platform during peak service hours.
• Analytics and improvement: To understand how visitors and merchants use our website and platform, which features are most popular, where users encounter difficulties, and how we can improve the overall experience.
• Marketing and outreach:To measure the effectiveness of our advertising campaigns, understand which channels bring merchants to our platform, and deliver relevant information about Ordeliya's services to prospective customers.

We are committed to using cookies transparently and in compliance with the EU ePrivacy Directive (2002/58/EC as amended), the General Data Protection Regulation (GDPR), and the Danish implementation of these frameworks. Non-essential cookies are only placed on your device after you have given informed consent through our cookie consent banner.

We categorize the cookies used across our services into five groups. Essential cookies are activated by default because they are necessary for basic platform functionality. All other categories require your explicit consent before they are set.

Essential Cookies

These cookies are strictly necessary for the operation of our website and platform. Without them, core features such as user authentication, session management, security protections, and cookie consent preferences would not function. You cannot opt out of essential cookies because they do not collect personal information for marketing purposes and are required for the service to operate.

Performance Cookies

Performance cookies help us understand how our infrastructure performs under load and whether users experience any errors or slowdowns. They collect information about page load times, server response times, and error rates. This data is aggregated and does not identify individual users. We use this information to maintain service reliability, particularly during peak restaurant ordering hours when uptime is critical for our merchants.

Functional Cookies

Functional cookies enable enhanced features and personalization. They remember your language selection, preferred dashboard layout, timezone settings, and other choices you make while using the platform. If you do not accept functional cookies, some of these features may not work correctly, and you may need to reconfigure your preferences on each visit.

Analytics Cookies

Analytics cookies allow us to count visits, identify traffic sources, and measure how users interact with our website and platform. We use this data to understand which pages and features are most useful, identify areas for improvement, and make informed decisions about product development. Analytics data is aggregated and anonymized where possible.

Marketing Cookies

Marketing cookies are used to track visitors across our website and, where applicable, across other sites. Their purpose is to measure the effectiveness of our advertising campaigns and to display relevant information about Ordeliya to prospective merchants. These cookies may share data with third-party advertising platforms. Marketing cookies are never set without your explicit consent.

Cookie Reference Table

The following table lists the specific cookies used across Ordeliya's services:

This table is reviewed and updated periodically. The actual cookies set on your device depend on which consent categories you have accepted and which Ordeliya services you use.

First-party cookies are set directly by the Ordeliya domain you are visiting (for example, ordeliya.com or app.ordeliya.com). These cookies are under our direct control, and we determine what data they store, how long they persist, and who can access them. The majority of cookies listed in this policy are first-party cookies used for authentication, session management, and preference storage.

Third-party cookiesare set by domains other than the one shown in your browser's address bar. When we integrate services such as Google Analytics, Cloudflare, or Meta advertising tools, those providers may set their own cookies on your device through our pages. Third-party cookie providers have their own privacy policies governing how the data collected through their cookies is used.

We carefully evaluate every third-party service before integrating it into our platform. We select providers that comply with GDPR and offer data processing agreements. Where available, we configure third-party tools to minimize data collection and enable IP anonymization. Third-party marketing and analytics cookies are only activated after you provide explicit consent.

Please note that major web browsers are progressively restricting or eliminating third-party cookies. As browser vendors implement these changes, we will adapt our analytics and marketing practices accordingly while continuing to respect your privacy preferences.

Ordeliya powers individual storefronts for our merchant customers. When you visit a restaurant's storefront (for example, a custom domain like pizzaroma.dk or a subdomain like d4e5f6.ordeliya.com), additional cookies may be set that are specific to the storefront experience rather than the Ordeliya marketing or administration sites.

Storefront-Specific Cookies

Storefront cookies serve purposes directly related to the online ordering experience:

• Cart session: Items you add to your cart are maintained through a session or local storage mechanism so that your order is not lost as you navigate between the menu, cart, and checkout pages.
• Customer authentication:If you create an account on a restaurant's storefront, a session token is stored to keep you logged in while you browse, place orders, or manage your profile.
• Locale and currency preference: Your language and market selection (for example, Danish Krone pricing vs. Euro pricing) is stored so the storefront displays content and prices in your preferred format.
• Order tracking: After placing an order, a session reference may be stored so you can track the status of your order without needing to re-authenticate.

Merchants who use Ordeliya may also integrate their own analytics, advertising, or other third-party tools into their storefronts. Ordeliya is not responsible for cookies set by merchant-integrated third-party services. We encourage merchants to maintain their own cookie disclosures for any additional tracking technologies they deploy on their storefronts, and we provide guidance to help them do so.

For questions about cookies on a specific restaurant's storefront, please contact that merchant directly. For questions about cookies set by Ordeliya's underlying platform infrastructure, please contact us using the details at the end of this policy.

We use analytics tools to understand how visitors interact with our marketing website and how merchants use the administration dashboard. This data helps us prioritize feature development, improve user interfaces, fix usability issues, and ensure our infrastructure scales to meet demand.

Google Analytics

We use Google Analytics 4 (GA4) on our marketing website to measure visitor traffic, understand acquisition channels, and track conversion events such as sign-up form submissions. GA4 uses first-party cookies (_ga, _ga_*, _gid) to distinguish unique visitors and maintain session state. We have configured GA4 with IP anonymization enabled and have signed a data processing agreement with Google. Analytics data is retained for 14 months and then automatically deleted.

Sentry Error Monitoring

We use Sentry for real-time error tracking and performance monitoring across all Ordeliya applications. When an error occurs, Sentry collects technical information about the error context, including the page URL, browser type, operating system, and a stack trace. Sentry does not use cookies for tracking but may process request metadata. Error data is used exclusively for debugging and improving platform reliability. Sentry processes data within the European Union.

Web Vitals

We collect Core Web Vitals metrics (Largest Contentful Paint, Cumulative Layout Shift, Interaction to Next Paint, and Time to First Byte) to monitor the real-world performance of our web applications. This data is collected anonymously and sent via the browser's sendBeacon API. It does not involve cookies and does not contain personally identifiable information.

All analytics data is used in aggregate to identify trends and patterns. We do not use analytics tools to build individual user profiles or to track specific users across unrelated websites.

Ordeliya may use social media and advertising cookies on our marketing website to measure the effectiveness of our advertising campaigns and to reach restaurant owners and operators who may benefit from our platform. These cookies are only activated with your explicit consent.

Meta (Facebook/Instagram)

If you consent to marketing cookies, the Meta Pixel may be loaded on our marketing pages. This allows us to measure conversions from our Facebook and Instagram advertising campaigns, create custom audiences for ad targeting, and understand which ad creatives resonate with restaurant professionals. The Meta Pixel sets the _fbp cookie. Meta processes this data according to its own data policy. We have entered into a data processing agreement with Meta for this service.

Google Ads

If you consent to marketing cookies, Google Ads conversion tracking may be enabled on our marketing pages. This sets the _gcl_au cookie and allows us to measure which Google Ads clicks lead to merchant sign-ups or demo requests. Google processes this data according to its advertising policies. We use Google Ads data solely to optimize our advertising spend and improve campaign targeting for the restaurant industry.

We do not serve third-party advertisements on our platform. Advertising cookies on Ordeliya's properties are used exclusively to measure our own outbound marketing efforts, not to display ads from other companies on our website or dashboard.

Social media and advertising cookies are never set on merchant storefronts by Ordeliya. If a merchant chooses to integrate their own advertising pixels on their storefront, that is governed by the merchant's own policies.

You have several options for controlling and managing cookies on your device. Your choices may affect the functionality of our website and platform, so we encourage you to review each option carefully.

Ordeliya Cookie Consent Banner

When you first visit our website, a cookie consent banner will appear allowing you to accept or decline non-essential cookie categories (performance, functional, analytics, and marketing). Your preferences are saved in the ordeliya_consentcookie and respected on all subsequent visits. You can change your preferences at any time by clicking the "Cookie Settings" link in the footer of our website.

Browser Settings

Most web browsers allow you to control cookies through their settings. You can typically configure your browser to block all cookies, block only third-party cookies, delete cookies when you close the browser, or be notified before a cookie is set. The process varies by browser:

• Chrome:Settings → Privacy and Security → Cookies and other site data
• Firefox:Settings → Privacy & Security → Cookies and Site Data
• Safari:Preferences → Privacy → Manage Website Data
• Edge:Settings → Cookies and site permissions → Manage and delete cookies and site data

Please be aware that blocking all cookies, including essential ones, may prevent you from logging into the Ordeliya platform, maintaining your session, or using core features.

Opt-Out Links for Third-Party Services

You can opt out of specific third-party analytics and advertising services using the following tools:

• Google Analytics: Google Analytics Opt-out Browser Add-on
• Meta (Facebook): Facebook Ad Preferences
• Google Ads: Google Ads Settings
• General (EU): Your Online Choices (EDAA)

Some web browsers transmit a "Do Not Track" (DNT) signal to the websites and online services you visit. The DNT signal is a preference expressed by the user indicating that they do not wish to be tracked across websites. There is currently no universally accepted standard for how websites should respond to DNT signals, and no industry consensus has been reached on their interpretation.

At this time, Ordeliya does not alter its data collection or cookie practices in response to DNT signals. However, we respect your privacy preferences through the mechanisms described in this policy: our cookie consent banner, browser-level cookie controls, and third-party opt-out tools. If a standardized DNT framework is adopted in the future, we will evaluate implementing support for it.

We also support the Global Privacy Control (GPC) signal where technically feasible. When our systems detect a GPC signal from your browser, we treat it as a request to opt out of non-essential cookie categories, equivalent to declining analytics and marketing cookies in our consent banner.

We may update this Cookie Policy from time to time to reflect changes in the cookies we use, the third-party services we integrate, applicable laws and regulations, or our business practices. When we make changes, we will update the "Last updated" date at the top of this page.

For significant changes, such as adding new categories of cookies, introducing new third-party tracking services, or changing our approach to consent, we will provide prominent notice on our website and, where appropriate, send a notification to registered merchants via email. In such cases, we may also reset your consent preferences so that you have the opportunity to review and accept the updated cookie practices.

We encourage you to review this Cookie Policy periodically to stay informed about how we use cookies and related technologies. Your continued use of our website and services after changes are posted constitutes acceptance of the updated policy, subject to any new consent requirements.

If you have any questions about this Cookie Policy, our use of cookies, or your cookie preferences, please contact us:

• Company: Ordeliya ApS
• Address: Copenhagen, Denmark
• Email: privacy@ordeliya.com
• Website: ordeliya.com

If you believe that our use of cookies infringes your rights under applicable data protection legislation, you have the right to lodge a complaint with the Danish Data Protection Agency (Datatilsynet) or the supervisory authority in your country of residence.

• Danish Data Protection Agency (Datatilsynet): www.datatilsynet.dk