Cookie Policy

Optional Google Ads measurement storage

On anonymous public home pages, the Google tag AW-18496318457 loads only after permission for Analytics and advertising measurement. It may use first-party _gcl_* cookies, normally lasting up to 90 days, and _gcl_ls local storage for advertising click attribution. Local storage can persist until cleared. Google may receive existing cookies on its own domains when the tag loads; those are controlled by Google and your browser.

Personalized advertising and enhanced conversions are disabled. Refusal blocks tag loading. Withdrawal through Privacy choices disables further measurement and clears this tag's first-party cookies and local storage. It does not remove data already sent to Google or Google's independent storage. You can also clear site data in your browser. See the Privacy Policy for processing and rights information.

Pending application connection

When you choose to sign in for an application connection, first-party session storage named deskcafes.pending-authorizationremembers the protected local destination and an expiry time in that browser tab. It retains the pending OAuth request or operation reference while you complete login, any authenticator step and account setup. It contains no passwords, authentication codes or access tokens, is not an analytics identifier and cannot authorize an application. The server still verifies your account and asks for application consent.

The request is usable for up to 30 minutes. It is removed on successful return or when an expired request is next read; session storage also ends when the tab session ends. It does not connect separate browser windows or transfer your login between browsers. Clear site data to remove it. Storage-disabled browsers retain the ordinary login and manual connection controls.

Language preference

On the homepage without a language in its URL, we use the approximate country supplied by Cloudflare to choose an available interface language. Your browser language helps with multilingual countries or when a supported country language is unavailable; English is the final fallback. We do not request precise location or retain the country for this choice.

When you explicitly select a language, the first-party __Host-deskcafes-locale cookie remembers only that language code for up to 180 days. It is sent over HTTPS with SameSite=Lax and cannot be read by page scripts. It takes priority over automatic selection on subsequent visits to the homepage. Automatic selection does not set it, and reads do not renew it. It contains no identifier, country, search or account data and does not enable analytics. Clear site data to remove it. URLs with an explicit language always keep that language.

Display currency preference

When you select a display currency, the first-party dc_currency cookie remembers only its three-letter currency code for up to 180 days. It is set only after your explicit selection, sent over HTTPS with SameSite=Lax, and readable by the page to update prices. Reads do not renew its lifetime. It contains no identifier, search, location or account data. Clear your browser's site data to remove it. This requested preference does not enable analytics. Converted prices are estimates; the venue's original currency remains binding.

Browser-choice storage

Name

__Host-deskcafes-consent

Provider

DeskCafés, operated by ComandaPay, S.L.

Purpose

Remember a privacy choice you explicitly save.

Content

A random browser identifier, not your contact details.

Lifetime

Up to 180 days from the saved choice.

When set

After a choice is successfully saved, not on an initial visit.

Scope

First-party, host-only; sent over HTTPS and unavailable to page scripts.

This cookie supports the preference function you request. It does not require optional analytics consent. The choice itself is stored on our server; the cookie lets us retrieve it for this browser. Reading the cookie does not extend the original choice period. The Privacy Policy explains the separate server record and your rights.

Account authentication storage

When sign-in is available, these first-party, host-only cookies support your requested authentication. They are sent only over HTTPS, cannot be read by page scripts and use SameSite=Lax. They do not require optional analytics consent and are not set merely by reading this policy.

__Host-deskcafes.session

Identifies a server-side account session. Its configured lifetime is seven days and may renew during use. Logging out or deleting the account revokes the corresponding server-side access.

__Host-deskcafes.magic-link-initiator

Binds a requested email code or compatible legacy sign-in link to the initiating browser, for up to ten minutes. It does not contain your email address. The internal cookie name is retained for compatibility.

__Host-deskcafes.email-code-request

Identifies the email-code request for up to five minutes using a signed random request reference, not the code or email address. Successful verification or sign-out clears it.

__Host-deskcafes.magic-link-stage

During upgrade compatibility or recovery, temporarily stages an already-issued sign-in link for explicit confirmation for up to five minutes. Treat it as an authentication secret.

__Host-deskcafes.google-oauth-browser

Binds an explicitly requested Google linking or sign-in exchange to this browser for up to ten minutes. It contains an opaque signed value, not your email address or Google profile. The callback clears it. A successful Google sign-in uses the existing account-session cookie described above.

If you enable the optional authenticator, __Host-deskcafes.totp-login is an essential, signed, HttpOnly first-party cookie lasting at most ten minutes. It binds the pending sign-in to this browser while you enter an authenticator or recovery code. It grants no account access and is cleared when sign-in completes. No authenticator code is stored in the cookie.

Blocking or removing authentication cookies prevents or interrupts sign-in. Removing a cookie does not by itself delete the account or its server-side records; use logout or account deletion as appropriate.

Returning to a requested review editor

When an available review or administrator-response editor requires sign-in, __Host-deskcafes.review-return remembers the requested destination in this browser for up to 30 minutes. It contains only the interface language, venue identifier, optional review identifier and expiry. It contains no review draft, visit identifier, contact details or authentication token. It is first-party, host-only, Secure, HttpOnly and SameSite=Lax. It is cleared when returning to the editor; reading it does not renew its lifetime. The latest requested destination replaces an earlier one. It grants no access and does not bypass sign-in, an enabled authenticator or the editor's eligibility checks.

This short-lived navigation aid supports the editor you requested and does not require optional analytics consent. We do not create a server-side record of the destination. Blocking or removing it leaves sign-in available but may require reopening the original editor link.

Venue request protection

__Host-deskcafes.venue-device is a first-party signed random identifier used to limit repeated venue lookups and verification requests. It is set after an authenticated venue request and lasts up to 48 hours. It contains no contact details, selected venue or code, is host-only, Secure, HttpOnly and SameSite=Lax, and is not renewed when read. It does not require optional analytics consent and is not an analytics identifier. The server keeps separate short-lived rate counters as described in the Privacy Policy.

Your controls

Open Privacy choices to choose essential only or change a previous choice. You can also remove or block the cookie through your browser. If it is removed or blocked, we may ask for your preference again. Browsing remains available. Removing it does not erase the server-side evidence of a choice already submitted.

Selecting Allow analytics permits the processing described in the current notice when available; a choice under the earlier notice does not authorise it. Choosing essential only withdraws permission and stops new capture. Requests already in flight and server-side cleanup follow the separate rules in the Privacy Policy.

Optional analytics storage

After your affirmative choice and a server-side eligibility check, PostHog uses temporary technical, session and window identifiers in memory on eligible public home pages. We configure no analytics cookies or session storage and no persistent storage of those SDK identifiers. Capture authority lasts no more than twenty-four hours.

The first-party local-storage entry deskcafes.analytics.sdk-consent contains 1 while capture is allowed. This is an SDK consent marker, not an account identifier. Stopping capture resets the SDK identity and clears the marker. Local storage has no automatic expiry: an interrupted browser can retain the marker until it is cleared or reinitialised. The marker alone cannot authorise capture; the server must confirm the current choice and eligibility.

Opening account screens or withdrawing consent stops capture. It does not resume automatically after logout. Browser storage removal is separate from provider event and replay deletion, described in the Privacy Policy. You can withdraw using Privacy choices.

Installation and optional notifications

A first-party service worker supports installation and caches only our fixed icons, static offline information and its display/reconnection resources. The functional cache contains no private account/visit responses, browser location, scan codes or actions waiting to be sent. You can remove it using the browser's site-data controls. Updates replace only DeskCafés' own information cache.

Device notifications require an explicit account choice and browser permission. The browser maintains its own push subscription and permission; DeskCafés stores the private delivery capability and the consent/retention data described in the Privacy Policy. This choice is independent of analytics. Disable the device or all devices in your account, or revoke browser permission. Removing an installed app or clearing browser data may invalidate its subscription, but does not guarantee immediate deletion of every browser/provider record.

Other storage and external services

Apart from the optional Google Ads storage described above, the public website does not use local or session storage for advertising or location. The interactive map and geographic search use Google Maps Platform. DeskCafés does not save map queries or coordinates in local or session storage. Google manages its SDK, technical processing and ordinary browser caching under its own policies. Map delivery and optional Near me location are explained in the Privacy Policy. Ordinary browser caching of pages, fonts and images is separate from tracking.

Choosing Google linking or sign-in opens Google's own pages. Their storage is governed by the Google Privacy Policy and Google's controls, not our analytics choice. DeskCafés does not load a Google sign-in SDK or embedded sign-in frame on an ordinary page visit.

Account verification forms use Cloudflare Turnstile for abuse protection, separately from analytics. It evaluates browser and network signals; see the Privacy Policy and Turnstile Privacy Addendum for its processing. This inventory does not claim that every third-party security interaction is local to this browser or server.

This policy covers DeskCafés pages. External websites you choose to open have their own storage and privacy practices. We will update this inventory before adding a service that changes it.