This Cookie Policy explains what Rink Fries Inc. ("Rink Fries", "we", "us", or "our") stores in your browser when you use the Rink Fries platform, and why. It is short because we store very little.
Summary
- We set only the cookies the site needs in order to work.
- We do not use advertising cookies, tracking pixels, or analytics cookies.
- There is no cookie banner because there is nothing to opt out of.
1. What a Cookie Is
A cookie is a small piece of text that a website asks your browser to keep, so that the site can recognise your browser on the next request. Without one, a site cannot tell that the person who added an item to a cart is the same person who is now paying for it.
2. The Cookies We Set
We last checked this list on 12 October 2026 against every place in the site's code that sets a cookie, and against Cloudflare's own list of the cookies its protection layer can set. It is the complete list of cookies. Section 5 covers the two other kinds of browser storage we use.
A session cookie (sessionid). This is how the site knows you are the same visitor from one page to the next. It keeps your cart with you, holds your browser location if you allowed it, and keeps you signed in if you have an account. How long it lasts depends on who you are. If you are browsing or ordering as a guest, or you work for a vendor, it is deleted when you close your browser. If you sign in as a customer, we keep you signed in for 21 days so that you do not have to sign in again for every order, and the cookie lasts that long. Signing out ends it immediately. It is marked HttpOnly (scripts on the page cannot read it), Secure (sent only over HTTPS), and SameSite=Lax (not sent when another site posts to us). On our side, we remove expired sessions every night.
A security cookie (csrftoken). Every form on the site carries a token that must match this cookie, which prevents another website from submitting a form as you. It holds no information about you. It lasts one year, is Secure and SameSite=Lax, and our own page scripts read it so that they can send the token with a request.
A status-message cookie (messages), sometimes. When the site needs to show you a one-line message on the next page, such as "Your order has been placed", it may carry that message in a cookie for one page and then remove it.
Cookies set by Cloudflare (cf_clearance, __cf_bm). Our site sits behind Cloudflare, which protects it from attacks. Cloudflare may set its own cookies to distinguish your browser from an automated one and to remember that you passed a security check. They are HttpOnly and Secure; cf_clearance can last up to one year, and __cf_bm lasts about half an hour and carries SameSite=None so that the browser sends it when Cloudflare's protection loads across sites. Cloudflare's use of these cookies is described in its own policy.
Two kitchen-screen cookies, for vendor staff only (rf_kds_station, rf_print_device). These are set only on the vendor dashboard's order screen, and only when a staff member selects a kitchen station or turns on order printing for that screen. rf_kds_station remembers which station the screen displays. rf_print_device identifies that screen as the one that prints orders and holds the time printing was turned on, whether it is on, and which staff account turned it on, signed so that it cannot be altered. Each lasts 180 days, is HttpOnly, Secure, and SameSite=Lax, and is sent only to the order screen's own pages. Customers never receive them.
That is the complete list of cookies.
3. What We Do Not Set
- No advertising cookies. The local advertisements on the site are placed by us and do not use cookies.
- No third-party tracking pixels or behavioural advertising tools.
- No analytics cookies. The wait-time estimates on the site come from order timestamps in our own database, not from observing your browser.
- No language or preference cookies. The site is in English only.
4. Your Location
If you allow location access in your browser, we use your position to show venues near you. It is kept in your session for that visit and is not written to a separate cookie or saved to your account. If you decline, the site still works and you can search for a venue by name or city.
5. Other Browser Storage
Three items we keep in your browser are not cookies, so they are never sent to us, but we list them in the same way.
- sessionStorage, key geoDenied. If you decline location access, we remember that for the current tab so that we do not ask again on every page. It is gone when the tab closes.
- sessionStorage, key pendingNewOrderChime. On the vendor dashboard's order screen, when the first order arrives into an empty queue the screen reloads itself; this holds the new-order count for that one reload so that the sound and message can still play. It is gone when the tab closes, and it exists only for staff using the dashboard.
- localStorage, key orderSoundEnabled. On the vendor dashboard's order screen, this remembers whether the new-order sound is on. It remains until the browser's site data is cleared, and it exists only for staff using the dashboard.
6. Managing Cookies
Your browser allows you to view, block, or delete cookies. If you block the session cookie, you will not be able to keep a cart or stay signed in, and if you block the security cookie, forms will not submit. Blocking Cloudflare's cookies may mean you are asked to pass a security check more often.
7. Changes to This Page
If we ever add a cookie that is not needed for the site to work, we will update this page and ask for your consent first.
8. Contact
Rink Fries Inc. Nova Scotia, Canada [email protected]