Draft, 14 September 2026. Written for review by a solicitor before OnlyFood takes public money.
Cookies
Two of them. Both needed to sign you in and serve the page. None for advertising.
Last updated 14 September 2026
1. The list
| Cookie | What it does | Kind | How long |
|---|---|---|---|
| Supabase auth session | Keeps you signed in, and is what proves to the database which recipes you have paid for. | Necessary | Until you sign out, or a week |
| Vercel's own | Routes the request to the right server and protects against abuse. Set by our host, not by us. | Necessary | The visit |
2. What we do not set
No advertising cookies. No tracking pixels. No Facebook or Google tags. Nothing that follows you to another website. We do not sell anyone access to your attention, so there is nothing here to build.
When you open a creator's shared recipe link we count the visit without a cookie and without your IP address — the privacy page explains the daily hash we use instead.
3. Why there is no banner
Both cookies above are strictly necessary to deliver a service you asked for, so the law does not require consent for them, and we are not going to interrupt you to ask for something we do not need. If we ever add an analytics or advertising cookie, a banner appears and it will be off until you say yes.
You can clear or block cookies in your browser at any time. Block the auth session cookie and you will not be able to stay signed in.
4. Contact
hello@onlyfood.me