Bocatoo - Restaurant QR Ordering System

1. Introduction

This Policy explains how Bocatoo (the "Platform") uses cookies and similar technologies on its website and/or application. By configuring your preferences in the cookie banner, you choose which categories you authorize.

2. What are cookies?

Cookies are small files that a website/app stores on your device (computer, phone, tablet). They allow, among other things, to remember your preferences, maintain your session, compile usage statistics and, if you accept, personalize advertising.

3. Types of cookies we may use

Strictly necessary (technical): essential for the site to function (e.g., login, maintain cart/order, security). No consent required.
Preferences or personalization: remember options (language, region, interface).
Analytics or measurement: help understand Platform usage (pages visited, actions), for statistical purposes.
Advertising/targeting: allow showing ads and measuring their performance, also on third-party sites/applications.
Cookies can be own (installed by Bocatoo) or third-party (installed by integrated providers).

4. Legal basis

Necessary: legitimate interest (make the service you request work).
Preferences, analytics and advertising: your consent, which you can grant, deny or revoke at any time from the Cookie Preferences Center (in the banner or footer: "Cookie Settings").

5. Consent management (CMP)

When entering, you'll see a banner with options:
Accept all,
Reject all (except necessary),
Configure by categories and Save.
You can change your choice whenever you want from the "Cookie Settings" link available on the Platform.

6. How to disable cookies from your browser

In addition to the banner, you can delete or block cookies from your browser settings (Chrome, Safari, Firefox, Edge, Opera help) or from system settings on iOS/Android. Keep in mind that blocking necessary cookies may affect site functionality.

7. Third-party cookies and embedded content

Some integrated services (analytics, maps, players, social buttons, advertising) may install their own cookies. Third-party embedded content is governed by their own policies. Bocatoo does not control those cookies; check their privacy/cookie notices.

8. Indicative cookie listing

Important: This table is indicative. Adjust it to your real integrations. If you don't use any of these services, delete their row. If you use others, add them.

Provider	Cookie / Example	Type	Typical Duration	Purpose
Bocatoo (own)	session_id, csrf_token	Necessary	Session / up to 1 year	Maintain secure session, prevent CSRF fraud.
Google Analytics 4	_ga, _ga_*, _gid	Analytics	_ga: 2 years; _gid: 24 h	Usage and performance metrics; aggregated reports.
Google Tag Manager	(no own cookie)	Analytics	—	Tag orchestration; doesn't measure by itself.
Meta (Facebook)	_fbp	Advertising	3 months	Campaign and audience measurement/optimization.
Hotjar	_hjSessionUser_, _hjSession_	Analytics	User: 365 days; Session: 30 min	Heat maps, user experience analysis.
Cloudflare	__cf_bm, cf_clearance	Necessary	30 min / up to 1 year	Anti-bot protection, performance/delivery network.
ReCAPTCHA	rc::a, rc::c (varies)	Necessary	Variable	Protection against form abuse.

If you use other tools (e.g., Microsoft Clarity, Segment, Amplitude, Sentry, Intercom, Zendesk), list them with their type, duration and purpose.

9. Changes to this policy

We may update this Policy to reflect legal or technical changes. We will publish the Last update date. If changes are substantial, we will communicate them to you by reasonable means. Continuing to use the Platform after the update implies your acceptance.

10. Contact

For queries about cookies or privacy:

contacto@bocatoo.com.ar (privacy)

contacto@bocatoo.com.ar (general support)

Quick compliance note

The banner must offer Accept all / Reject all / Configure.
The Preferences Center must allow activate/deactivate by category (except necessary).
The cookie table must be kept aligned with the real integrations of your site/app.

Bocatoo Cookie Policy